Introduction to seccomp: BPF Linux syscall filter (2014)
blog.yadutaf.fr