seccomp

Seccomp by Default: Kubernetes Container Security

Seccomp (Secure Computing Mode) limits which system calls a process can make, reducing the attack surface.