[Bug 1137139] VUL-1: CVE-2019-12589: firejail: seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions