def METHOD_NAME(test_microvm_with_api):
    """
    Test --seccomp-filter, rejecting some dangerous syscalls.
    """
    test_microvm = test_microvm_with_api
    _custom_filter_setup(
        test_microvm,
        """{
        "Vmm": {
            "default_action": "allow",
            "filter_action": "kill_process",
            "filter": [
                {
                    "syscall": "clone"
                },
                {
                    "syscall": "execve"
                }
            ]
        },
        "Api": {
            "default_action": "allow",
            "filter_action": "kill_process",
            "filter": [
                {
                    "syscall": "clone"
                },
                {
                    "syscall": "execve"
                }
            ]
        },
        "Vcpu": {
            "default_action": "allow",
            "filter_action": "kill_process",
            "filter": [
                {
                    "syscall": "clone"
                },
                {
                    "syscall": "execve",
                    "comment": "sample comment"
                }
            ]
        }
    }""".encode(
            "utf-8"
        ),
    )
    test_microvm.spawn()
    test_microvm.basic_config()
    test_microvm.start()
    # level should be 2, with no additional errors
    utils.assert_seccomp_level(test_microvm.jailer_clone_pid, "2")