SECCOMP_RET_ACTION_FULL
action = filter_ret & SECCOMP_RET_ACTION_FULL;
#define ACTION_ONLY(ret) ((s32)((ret) & (SECCOMP_RET_ACTION_FULL)))