change default behavior for execve from accept to log

src/main.rs

@@ -134,7 +134,7 @@ fn main() -> anyhow::Result<()> {
     let mut filter = ScmpFilterContext::new_filter(default_action)?;
 
     filter.add_rule(
-        ScmpAction::Allow,
+        ScmpAction::Log,
         ScmpSyscall::from(nix::libc::SYS_execve as i32),
     )?;