Introduction to seccomp: BPF Linux syscall filter (2014) | Dark Hacker News