really simple sandboxing of untrusted C programs using Linux SECCOMP - View it on GitHub