-#ifdef HAVE_SECCOMP
- scmp_filter_ctx syscall_filter;
- Set *filtered_syscalls;
- uint32_t syscall_filter_default_action;
-#endif
- char *syscall_filter_string;
+ unsigned long personality;
+
+ Set *syscall_filter;
+ Set *syscall_archs;
+ int syscall_errno;
+ bool syscall_whitelist:1;
+
+ Set *address_families;
+ bool address_families_whitelist:1;
+
+ char **runtime_directory;
+ mode_t runtime_directory_mode;