Changelog Update

[revert] Linux sandboxing now falls back to Landlock-only restrictions when user namespaces are unavailable, and sets no_new_privs before applying sandbox rules. (#9250)