====seccomp=====

all about setting up an allow list and a deny list of system calls that will be allowed from your namespace