seccomp: cap dirent/BPF size, seal injected memfds (#13)#25

congwang-mk merged 1 commit intomainmultikernel/sandlock:mainfrom

sec-13-hardeningmultikernel/sandlock:sec-13-hardeningCopy head branch name to clipboard