Simple syscall sandboxing for Linux - View it on GitHub