check: add a check for seccomp filters c/r

v2: use a non-racy version of fork_and_ptrace_attach

Signed-off-by: Tycho Andersen <tycho.andersen@canonical.com>
Signed-off-by: Pavel Emelyanov <xemul@parallels.com>