seccomp: allow rseq syscall

Starting with v4.18, the Linux kernel provides the rseq
syscall which is a mechanism for fast userspace task
synchronization.

Starting with v2.35 glibc uses the new syscall, if it
exists, to gain some performance improvements, so we
need to update the policy files to allow it.

Even on older kernels where rseq is not supported,
glibc will still probe for its existence by expecting
an -ENOSYS response.

BUG=b:235960683
TEST=Local builds against glibc 2.35

Cq-Depend: chromium:3749266
Change-Id: I2e4ce846de5f2a87e23d158fc5e1e67a0fa575ab
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/touch_updater/+/3758088
Reviewed-by: Allen Webb <allenwebb@google.com>
Owners-Override: Dominick Ng <dominickn@google.com>
Tested-by: Manoj Gupta <manojgupta@chromium.org>
Commit-Queue: Manoj Gupta <manojgupta@chromium.org>
58 files changed