check for kernel versions

It doesn't seem like there's any kernel version checking going on.

Sounds useful for future changes to seccomp bpf/etc., and to fail on kernels that are too old.

Or perhaps rely on the kernel to make changes incompatible enough to just fail the calls?

Start by reviewing the project's seccomp BPF and Landlock interactions and how they depend on the running kernel version. Define which older kernels must be rejected or allowed to fail naturally, then verify that the chosen compatibility behavior covers the relevant calls.

Written by the indexing model from the issue text.