Function new_strict 

pub fn new_strict() -> Ruleset

Creates a policy that fails if the running kernel cannot enforce a rule.

Rules that need a newer Landlock ABI (see the kernel support table) make Ruleset::restrict_self return Error::Unsupported. Use new_best_effort to degrade instead.