Changelog for landlock-0.2.1.1

Revision history for landlock

Use vendored linux/landlock.h instead of system-provided header during build.
Support Landlock ABI v2 and LANDLOCK_ACCESS_FS_REFER as part of it.
Support Landlock ABI v3 and LANDLOCK_ACCESS_FS_TRUNCATE as part of it.
Support GHC 9.4.2 / base ^>=4.17.
Support unix ^>=2.8.
Add a new executable,landlocked, which permits to run a command in a sandboxed environment.
Add a flag, landlocked, which allows to not build the landlocked executable.
Use capi foreign imports instead of ccall using the CApiFFI language extension.
Add a Cabal flag, werror, to enable compiler -Werror and friends.

Code-wise the same as version 0.2.0.0, but said version was incorrectly published on Hackage, hence re-releasing.

Support base ^>=4.15 and base ^>=4.16, tested in CI using GHC 9.0.2 and GHC 9.2.2.
Add a dependency on psx to avoid setxid-style security issues.

See test/ThreadedScenario.hs for a scenario which triggers the aforementioned security issue, which needs a Glibc setxid-style work-around. This scenario is executed by the new landlock-test-threaded test-suite.

See https://github.com/NicolasT/landlock-hs/issues/9 for more background.