Using Seccomp To Limit The Kernel Attack Surface - Michael Kerrisk, Man7.Org Training And Consulting