Added new syscalls for strict sandbox filter

There are some new systemcall that were intruduced in the recent kernel version.

When compiled with recent library versions, the syscalls newfstatat and statx are required for the optional strict sandbox mode.