History Purpose: to restrict System Call that can be made from a process. invoked by using prctl() Links A seccomp overview [LWN.net] eBPF