Do not allow name_to_handle_at, as we have already blocked open_by_handle_at

Being able to obtain a file handle is no use as we cannot perform
any operation in it, and it may leak kernel state.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
Upstream-commit: c1b57fc1c9e230b95c2c76d1eaca0e3622fc72d5
Component: engine

components/engine/daemon/execdriver/native/seccomp_default.go

@@ -803,11 +803,6 @@ var defaultSeccompProfile = &configs.Seccomp{
 			Action: configs.Allow,
 			Args:   []*configs.Arg{},
 		},
-		{
-			Name:   "name_to_handle_at",
-			Action: configs.Allow,
-			Args:   []*configs.Arg{},
-		},
 		{
 			Name:   "nanosleep",
 			Action: configs.Allow,