In the kernel, a socket philtre that is automatically enabled for sockets of the type specified.
(London, United Kingdom)