code: func (a *App) SeccompOverride() (mode string, errno string, set []string, e error) {
  	if a.SeccompFilter == "" {
  		return
  	}
  	for _, i := range strings.Split(a.SeccompFilter, ",") {
  		kv := strings.Split(i, "=")
  		if len(kv) == 2 {
  			switch kv[0] {
  			case "mode":
  				if kv[1] != "remove" && kv[1] != "retain" {
  					e = ErrInvalidSeccompMode
  				}
  				mode = kv[1]
  			case "errno":
  				errno = kv[1]
  			default:
  				e = ErrInvalidSeccompOverride
  			}
  		} else {
  			set = append(set, i)
  		}
  	}
  	return
  }
docs: // SeccompFilter returns type, filter set and optional errno
  // for a seccomp filter override specified via CLI