[FullyFunctional]

tame(2) seems really ad-hoc. Also, isn't the path checking, like

  strncmp(path, "/tmp/", 5) == 0) {

trivially bypassable with a something like /tmp/../usr/bin ?