The seccomp struct used in runc is redefined from runtime-spec's definition which is already vendored in. They're almost the same except for the Operator type being an int instead of a string. I'm fairly certain this is a relic from Docker.

If I can get some feedback, I can switch it over for consistencies sake without making any changes to the configs package api.