what level of jailing should this use btw i noticed that metrics daemon is not jailed should it have it is own user group  seccomp policy  this program does take some input  d bus signals with a small payload  it reads sysfs files  and can write into a couple of sysfs files at startup  it creates and writes files in  var log  it also does syslog 