allow 'newfstatat' in the sandbox

Newer kernels/libc use this in preference to `stat`/`fstat`.

Reported-by: Lucas Nussbaum <lucas@debian.org>

Debian: #1002186 “rumur: FTBFS”
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002186