generate/seccomp: Allow Landlock syscalls

[l0kod]

Landlock is a Linux feature that enables creating security sandboxes (see https://docs.kernel.org/userspace-api/landlock.html). Allow the three related system calls (available since Linux 5.13): landlock_create_ruleset, landlock_add_rule, and landlock_restrict_self.

Signed-off-by: Mickaël Salaün mic@digikod.net

[l0kod]

This is equivalent to https://github.com/containers/common/pull/1081 and https://github.com/moby/moby/pull/43199

[rhatdan]

@giuseppe @vbatts @mrunalp @AkihiroSuda @kolyshkin PTAL

[kolyshkin]

close/reopen to kick ci