pub const SECCOMP_FILTER_FLAG_SPEC_ALLOW: u32 = 4;