gnovm: add syscall filtering to ensure no Virtual Machine escapes from exploits and vulnerabilities

gnovm: add syscall filtering to ensure no Virtual Machine escapes from exploits and vulnerabilities #11688