seccomp: allow rseq syscall

Starting with v4.18, the Linux kernel provides the rseq
syscall which is a mechanism for fast userspace task
synchronization.

Starting with v2.35 glibc uses the new syscall, if it
exists, to gain some performance improvements, so we
need to update the policy files to allow it.

Even on older kernels where rseq is not supported,
glibc will still probe for its existence by expecting
an -ENOSYS response.

BUG=b:235960683
TEST=Local builds against glibc 2.35

Cq-Depend: chromium:3749266
Change-Id: I4e89d31edd0fee0878d29c99f00f69948decc20a
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/third_party/tlsdate/+/3763920
Tested-by: Manoj Gupta <manojgupta@chromium.org>
Owners-Override: Dominick Ng <dominickn@google.com>
Commit-Queue: Manoj Gupta <manojgupta@chromium.org>
Reviewed-by: Allen Webb <allenwebb@google.com>
5 files changed