Also, if you don't trust it, just set everything to SECCOMP_RET_TRACE, which kills the process if there is no ptracer
A small correction, it causes for the syscall not to be executed, and return with errno==ENOSYS
A small correction, it causes for the syscall not to be executed, and return with errno==ENOSYS