[yencabulator]

Linux ended up with seccomp and landlock.

https://docs.kernel.org/userspace-api/seccomp_filter.html

https://docs.kernel.org/userspace-api/landlock.html