Apply some sugguestions from nicm@; unlike systrace(4), the seccomp filtering can be setup in the child process. We can avoid kill(2) system call and the waidpid dance.
Apply some sugguestions from nicm@; unlike systrace(4), the seccomp filtering can be setup in the child process. We can avoid kill(2) system call and the waidpid dance.

brynet/file,brynet/file