Seccomp-BPF as a filterSeccomp-BPF lets you attach a Berkeley Packet Filter program that decides which syscalls a process is allowed to make. You can deny dangerous syscalls like process tracing, filesystem manipulation, kernel extension loading, and performance monitoring.
Open-source projects that rely on volunteer contributors
，详情可参考Line官方版本下载
黎智英欺詐案上訴得直：定罪及刑罰被撤銷，出獄時間提前
Monica de Bolle