chiark / gitweb /
nspawn: Map all seccomp filters to capabilities