Revert "fix(fedimint): run fmcd with seccomp=unconfined so its DHT can start (#7)"

This reverts commit 409543c41e.

core/container/src/manifest.rs

@@ -228,13 +228,6 @@ pub struct SecurityPolicy {
     pub network_policy: String,
     #[serde(default)]
     pub apparmor_profile: Option<String>,
-    /// Run the container with `seccomp=unconfined`. Needed by daemons whose
-    /// networking uses syscalls blocked by the default rootless seccomp profile
-    /// on some kernels — e.g. fmcd's Mainline-DHT/iroh transport, which otherwise
-    /// crash-loops with "Operation not permitted (os error 1)" (#7). Opt-in only;
-    /// a mild relaxation, so reserve it for apps that genuinely need it.
-    #[serde(default)]
-    pub seccomp_unconfined: bool,
 }
 
 fn default_true() -> bool {

core/container/src/podman_client.rs

@@ -384,17 +384,6 @@ impl PodmanClient {
                 "nsmode": net_mode
             },
         });
-        // seccomp=unconfined for apps that need syscalls the default rootless
-        // profile blocks (e.g. fmcd's DHT) — libpod takes the literal "unconfined"
-        // as the profile path, mirroring `--security-opt seccomp=unconfined` (#7).
-        if manifest.app.security.seccomp_unconfined {
-            body.as_object_mut()
-                .expect("container create body is a JSON object")
-                .insert(
-                    "seccomp_profile_path".to_string(),
-                    serde_json::json!("unconfined"),
-                );
-        }
         if let Some(network) = custom_network {
             body.as_object_mut()
                 .expect("container create body is a JSON object")