improve compat/getprogname on GNU libc but why'd they called it program_invocation_short_name? They couldn't find a longer name?

add check for program_invocation_short_name

add -levent in the example

use fatal instead of err/fprintf+exit fatal logs to the correct place, err only on stderr.

fix compilation on OSes without sandbox

fix setproctitle detection on FreeBSD

link to compat/ even in regress this unlocks the full regress tests on arch, for instance, or every OS where we don't have strl*

[seccomp] allow newfstatat and gettimeofday these are required to run on arch linux (at least)

[seccomp] epoll_wait(2) isn't available on every arch

add newline after usage

fix "first location" bug reported by devel at datenbrei dot de. The first location would overwrite the default value for a server, triggering the "`foo' rule specified more than once" error. This also needed a small tweak on how we match locations to avoid breaking other tests.

fix ca generation

don't allocate BIGNUM on the stack on fedora 33 the BIGNUM type is opaque. Allocate always to avoid headaches.

allow epoll_wait fedora 33 issue an epoll_wait instead of pwait.

typo