RFE: add support for SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV (Linux 5.19)

[alban]

Linux 5.19 introduced a new seccomp flag: SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV https://github.com/torvalds/linux/commit/c2aa2dfef243

I would like to use it to handle notification from Golang programs which are often preempted by the runtime with SIGURG.

Related issues in other projects:

• https://github.com/seccomp/libseccomp/issues/417
• https://github.com/libseccomp-rs/libseccomp-rs/issues/142
• https://github.com/opencontainers/runtime-spec/pull/1161
• https://github.com/opencontainers/runc/issues/3860
• https://github.com/kubernetes-sigs/security-profiles-operator/pull/1201
• https://github.com/containers/crun/pull/1008

cc @rata

[alban]

Implemented:

• https://github.com/seccomp/libseccomp/pull/391#issuecomment-1297561532
• https://github.com/seccomp/libseccomp/commit/96989965042a515a3cbcb50e9b98243b9b7d4c37

Available in libseccomp v2.5.5