Robuta

https://openwall.com/lists/kernel-hardening/2012/03/13/2
kernelhardeningpatchskrun
https://launchpad.net/ubuntu/focal/i386/python3-seccomp
This library provides a high level interface to constructing, analyzing and installing seccomp filters via a BPF passed to the Linux Kernel's prctl() syscall.
seccompfocalubuntu
https://outflux.net/teach-seccomp/
usingsimpleseccompfilters
https://kyleavery.com/posts/seccomp-notify-injection/
Unprivileged user-space process injection from parent-to-child without ptrace, procfs, or process_vm_writev.
linuxprocessinjectionviaseccomp
https://www.kernel.org/doc/Documentation/features/seccomp/
indexdocfeaturesseccomp
https://openwall.com/lists/kernel-hardening/2012/02/21/11
kernelhardeningpatchseccompadd