a utility for preventing exec() calls

[Nick C. <ni...@cl...>]

I made this, it might be interesting to anyone looking to implement
something like rssh, or to un-retire rssh itself: it allows you to execute
a program but trap any calls to libc exec* syscall wrappers that the
program might make:

https://github.com/ncleaton/libcallfilt

It provides a second line of defense if you've tried to block all of the
options that could exec arbitrary things but you may have missed something.