8 ms·win32k lockdown is part of the sandbox. On Linux you do this with seccomp filtering for example.by gcp 10y agowin32k lockdown is part of the sandbox. On Linux you do this with seccomp filtering for example.