Following libraries and programs can be used to enforce limits on the user program: - cgroups - seccomp - memfd - ptracer Explore possibilities of each