1) Linux kernel feature 
seccomp (short for secure computing mode) is a simple but solid secure-computing facility (sandboxing mechanism) for the Linux kernel. It was added to version 2.6.12 of the Linux kernel mainline on March 8, 2005. It allows a process to make a one-way transition into a `secure` state where it cannot make any system calls except exit, sigreturn, r.....