libseccomp provides an easy to use, platform independent, interface to the Linux syscall filtering mechanism.