Forbid system calls related to kernel keyrings
Forbid system calls related to kernel keyrings

Before Linux 5.2, they keyrings were not namespace-aware,
which means that any process inside the container can access the keyring
of the user who started the container.
These keyrings contain keys for example for kerberos and ecryptfs,
so this can be critical.

sosy-lab/benchexec,ultimate-pa/benchexec,sosy-lab/benchexec,sosy-lab/benchexec,ultimate-pa/benchexec,ultimate-pa/benchexec,dbeyer/benchexec,ultimate-pa/benchexec,ultimate-pa/benchexec,dbeyer/benchexec,sosy-lab/benchexec,dbeyer/benchexec,dbeyer/benchexec,sosy-lab/benchexec,ultimate-pa/benchexec,sosy-lab/benchexec