seccomp: ignore unsupported wait-kill flag probe

[pacoxu]

See kubernetes/kubernetes#140039.

The logic here was added in #5172.

[rata]

@pacoxu did you also verify this solves the issue on CI somehow?

[rata]

Thanks for the PR! This almost LGTM. If this fixes the issue, I'm fine using this as a quick-fix to release 1.5.1

However, I'd also like to understand how runc is being built in kubernetes CI (not blocking the merge). I guess it is being compiled with an old seccomp headers (< 2.6.0), but run with new headers (>= 2.6.0). Can you confirm this is true?

[lifubang]

I guess it is being compiled with an old seccomp headers (< 2.6.0), but run with new headers (>= 2.6.0).

This is precisely the situation I aimed to prevent for libpathrs. A similar version check might also be necessary for libseccomp, as proposed in #5344. However, implementing it there would constitute a break change. If you'd like to discuss this further, let's continue the conversation in #5344.