Block a user
Replace default blacklist with whitelist?
WIP low-level seccomp arg filter interface
seccomp: support Deny -> Permit -> Default Deny
Allow adding syscalls by group names
WIP: Assign syscalls into groups. Add whitelist mode (default).
WIP: Assign syscalls into groups. Add whitelist mode (default).