{"action":"opened","issue":{"url":"https://api.github.com/repos/dkopecek/usbguard/issues/25","labels_url":"https://api.github.com/repos/dkopecek/usbguard/issues/25/labels{/name}","comments_url":"https://api.github.com/repos/dkopecek/usbguard/issues/25/comments","events_url":"https://api.github.com/repos/dkopecek/usbguard/issues/25/events","html_url":"https://github.com/dkopecek/usbguard/issues/25","id":68404440,"number":25,"title":"[RFE] Use seccomp to create a syscall whitelist and drop capabilities that aren't needed at runtime","user":{"login":"dkopecek","id":1353140,"avatar_url":"https://avatars.githubusercontent.com/u/1353140?v=3","gravatar_id":"","url":"https://api.github.com/users/dkopecek","html_url":"https://github.com/dkopecek","followers_url":"https://api.github.com/users/dkopecek/followers","following_url":"https://api.github.com/users/dkopecek/following{/other_user}","gists_url":"https://api.github.com/users/dkopecek/gists{/gist_id}","starred_url":"https://api.github.com/users/dkopecek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dkopecek/subscriptions","organizations_url":"https://api.github.com/users/dkopecek/orgs","repos_url":"https://api.github.com/users/dkopecek/repos","events_url":"https://api.github.com/users/dkopecek/events{/privacy}","received_events_url":"https://api.github.com/users/dkopecek/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/dkopecek/usbguard/labels/enhancement","name":"enhancement","color":"84b6eb"},{"url":"https://api.github.com/repos/dkopecek/usbguard/labels/security","name":"security","color":"000000"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/dkopecek/usbguard/milestones/4","html_url":"https://github.com/dkopecek/usbguard/milestones/v1.0","labels_url":"https://api.github.com/repos/dkopecek/usbguard/milestones/4/labels","id":1050854,"number":4,"title":"v1.0","description":"","creator":{"login":"dkopecek","id":1353140,"avatar_url":"https://avatars.githubusercontent.com/u/1353140?v=3","gravatar_id":"","url":"https://api.github.com/users/dkopecek","html_url":"https://github.com/dkopecek","followers_url":"https://api.github.com/users/dkopecek/followers","following_url":"https://api.github.com/users/dkopecek/following{/other_user}","gists_url":"https://api.github.com/users/dkopecek/gists{/gist_id}","starred_url":"https://api.github.com/users/dkopecek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dkopecek/subscriptions","organizations_url":"https://api.github.com/users/dkopecek/orgs","repos_url":"https://api.github.com/users/dkopecek/repos","events_url":"https://api.github.com/users/dkopecek/events{/privacy}","received_events_url":"https://api.github.com/users/dkopecek/received_events","type":"User","site_admin":false},"open_issues":6,"closed_issues":1,"state":"open","created_at":"2015-04-02T19:21:37Z","updated_at":"2015-04-14T15:08:10Z","due_on":"2015-07-30T22:00:00Z","closed_at":null},"comments":0,"created_at":"2015-04-14T15:08:10Z","updated_at":"2015-04-14T15:08:10Z","closed_at":null,"body":"The code isn't bullet proof. Let's try to secure the daemon with all that's available. This feature should be **on by default** with an option to disable the feature."}}