I was looking through the upcoming Go 1.28 changes and found the new Landlock support in syscall.SysProcAttr interesting. It lets Go apply a Landlock ruleset to a subprocess without restricting the parent process.…
Everything subprocess.run() does that you're not using: capture_output, timeout enforcement, cwd isolation, env injection, stdin piping. With working examples for each.