chore(seccomp): add read syscall to vcpu filter

This is required by Secret Freedom to implement the userfault protocol:
vCPUs read notifications of fault handling completions from eventfd.

Signed-off-by: Nikita Kalyazin <[email protected]>

Author: kalyazin

resources/seccomp/aarch64-unknown-linux-musl.json

@@ -743,6 +743,9 @@
             {
                 "syscall": "exit_group"
             },
+            {
+                "syscall": "read"
+            },
             {
                 "syscall": "write"
             },

resources/seccomp/x86_64-unknown-linux-musl.json

@@ -755,6 +755,9 @@
             {
                 "syscall": "exit_group"
             },
+            {
+                "syscall": "read"
+            },
             {
                 "syscall": "write"
             },