What is Linux capabilities and seccomp in Container Security?

Linux capabilities split root privileges into smaller units, while seccomp restricts available system calls.