seccomp: remove timerfd_create from allow-list

`TimerFd`s are used by rate-limiters, metrics, and balloon device.
All of them are created before boot, thus before seccomp filters
are applied.
This means we don't need `timerfd_create` syscall on our allow-list,
and can be removed to tighten it.

Signed-off-by: Adrian Catangiu <[email protected]>

Author: acatangiu

resources/seccomp/aarch64-unknown-linux-musl.json

@@ -237,26 +237,6 @@
                     }
                 ]
             },
-            {
-                "syscall": "timerfd_create",
-                "comment": "Needed for rate limiting and metrics",
-                "args": [
-                    {
-                        "arg_index": 0,
-                        "arg_type": "dword",
-                        "op": "eq",
-                        "val": 1,
-                        "comment": "libc::CLOCK_MONOTONIC"
-                    },
-                    {
-                        "arg_index": 1,
-                        "arg_type": "dword",
-                        "op": "eq",
-                        "val": 526336,
-                        "comment": "libc::TFD_CLOEXEC | libc::TFD_NONBLOCK"
-                    }
-                ]
-            },
             {
                 "syscall": "timerfd_settime",
                 "comment": "Needed for rate limiting and metrics",

resources/seccomp/x86_64-unknown-linux-musl.json

@@ -237,26 +237,6 @@
                     }
                 ]
             },
-            {
-                "syscall": "timerfd_create",
-                "comment": "Needed for rate limiting and metrics",
-                "args": [
-                    {
-                        "arg_index": 0,
-                        "arg_type": "dword",
-                        "op": "eq",
-                        "val": 1,
-                        "comment": "libc::CLOCK_MONOTONIC"
-                    },
-                    {
-                        "arg_index": 1,
-                        "arg_type": "dword",
-                        "op": "eq",
-                        "val": 526336,
-                        "comment": "libc::TFD_CLOEXEC | libc::TFD_NONBLOCK"
-                    }
-                ]
-            },
             {
                 "syscall": "timerfd_settime",
                 "comment": "Needed for rate limiting and metrics",