Hi, I attempted to apply Eduardo's seccomp patches and ran into a number of problems. In the interest of time, I thought it would be easier for me to fix them and just respin the series myself.
I've tested this as best I can--I don't have a seccomp capable kernel. But since the option is available regardless of kernel support, I feel pretty confident that this at least as correct as Eduardo's series.