[viraptor]

You pretty much described seccomp. They do the same thing, just with a different interface.