Patch for Docker seccomp profile to allow unprivileged user and mount namespaces (unprivileged FUSE)

fuse.diff

--- default.json	2020-08-20 17:12:32.077214836 +0200
+++ fuse.json	2020-08-20 17:12:26.407300355 +0200
@@ -618,54 +618,17 @@
 		},
 		{
 			"names": [
-				"clone"
+				"clone",
+				"mount",
+				"umount",
+				"umount2",
+				"unshare"
 			],
 			"action": "SCMP_ACT_ALLOW",
-			"args": [
-				{
-					"index": 0,
-					"value": 2114060288,
-					"valueTwo": 0,
-					"op": "SCMP_CMP_MASKED_EQ"
-				}
-			],
+			"args": [],
 			"comment": "",
 			"includes": {},
-			"excludes": {
-				"caps": [
-					"CAP_SYS_ADMIN"
-				],
-				"arches": [
-					"s390",
-					"s390x"
-				]
-			}
-		},
-		{
-			"names": [
-				"clone"
-			],
-			"action": "SCMP_ACT_ALLOW",
-			"args": [
-				{
-					"index": 1,
-					"value": 2114060288,
-					"valueTwo": 0,
-					"op": "SCMP_CMP_MASKED_EQ"
-				}
-			],
-			"comment": "s390 parameter ordering for clone is different",
-			"includes": {
-				"arches": [
-					"s390",
-					"s390x"
-				]
-			},
-			"excludes": {
-				"caps": [
-					"CAP_SYS_ADMIN"
-				]
-			}
+			"excludes": {}
 		},
 		{
 			"names": [