seccomp: block new mount API when mount interception is requested
seccomp: block new mount API when mount interception is requested

The mount interception is requested we need to block the new mount API since it
keeps in-kernel state across multiple and an arbitrary number of syscalls.

Signed-off-by: Christian Brauner <48455ab3070520a2d174545c7239d6d0fabd9a83@ubuntu.com>

hallyn/lxd,hallyn/lxd,lxc/lxd,atxwebs/lxd,lxc/lxd,stgraber/lxd,lxc/lxd,stgraber/lxd,mjeanson/lxd,lxc/lxd,hallyn/lxd,atxwebs/lxd,stgraber/lxd,lxc/lxd,Skarlso/lxd,atxwebs/lxd,stgraber/lxd,hallyn/lxd,stgraber/lxd,Skarlso/lxd,hallyn/lxd,lxc/lxd,stgraber/lxd,hallyn/lxd,Skarlso/lxd,lxc/lxd,stgraber/lxd,Skarlso/lxd,mjeanson/lxd,atxwebs/lxd,mjeanson/lxd