Fault-tolerant syscall filter library