Seccomp

Seccomp restricts which system calls a process can make and with what arguments.

Seccomp is one of the Linux isolation primitives, alongside the namespace, the cgroup, and capabilities. The kernel mediates all access to devices and to other processes through a few hundred system calls. The system call interface exposes a great deal of kernel code to any process, and each system call is a possible path to a kernel bug. Seccomp limits the calls that a process may make and the arguments that those calls may carry.