Start Linux programs with only selected syscalls enabled (libseccomp-based) - View it on GitHub