6 ms·The safest way to do it would be to implement it with seccomp so you unconditionally block those syscalls.by cycloptic 5y agoThe safest way to do it would be to implement it with seccomp so you unconditionally block those syscalls.