cool. i've been sweet on seccomp-bpf for a few years now. when i saw the talk about seccomp before, I was like, that's nice (for linux, at least), but seccomp-bpf would be me more like, heh, sweet. :) looks like more than plain old seccomp is just wishful thinking still though.
stemid: i got one a few months ago, and finally email in about it yesterday, as it so happens. guess it'll be a while, eh. lol