Changes since 1.0.5:

• security: whitelist the getcwd syscall
• security: fix build on systems w/out si_syscall
• security: whitelist the futex syscall
• security: whitelist dup syscalls
• security: do not warn when seccomp is disabled in the kernel
• security: whitelist fakeroot syscalls
• security: add a debug handler for seccomp
• security: clean up syscall ifdefs
• security: use seccomp to lock ourselves down
• security: lock down privs a bit via prctl
• security: leverage namespaces to restrict the runtime a bit
• lddtree.sh: fix interp handling when doing a full listing
• lddtree.py: fix glob handling w/ld.so.conf
• scanelf: fix memory leak with the -s option