Hi,

It would be great if it was easy to use seccomp, rather than having to manually create seccomp-bpf filters. It could be managed similar to capabilities e.g. —seccomp-drop chroot() and —seccomp-add kexec().

People like myself don’t know how to manually create seccomp-bpf filters so this would be a good option for them.