small filter changes; openat as separate function
removed open flags (postponed), added mmap2 flags