lcars@gentoo.org Systrace enforces system call policies for applications by constraining the application's access to the system.