def drop_perms():
        """
        Set restrictions on system calls using seccomp for Linux.
        The restrictions can be adjusted as needed based on the app's specifications.
        """
        # Create a SyscallFilter instance with ALLOW as the default action
        filter = seccomp.SyscallFilter(seccomp.ALLOW)

        # load the filter in the kernel
        filter.load()

        Set restrictions on system calls using seccomp for Linux.
        The restrictions can be adjusted as needed based on the app's specifications.
        
llama-index-packs/llama-index-packs-secgpt/llama_index/packs/secgpt/sandbox.py