PAM module sets up seccomp syscall filter for a session. - View it on GitHub