sandbox: add copy_file_range to allowed filesystem syscalls

src/util/syscall_sandbox.cpp

@@ -539,6 +539,7 @@ public:
         allowed_syscalls.insert(__NR_access);          // check user's permissions for a file
         allowed_syscalls.insert(__NR_chdir);           // change working directory
         allowed_syscalls.insert(__NR_chmod);           // change permissions of a file
+        allowed_syscalls.insert(__NR_copy_file_range); // copy a range of data from one file to another
         allowed_syscalls.insert(__NR_fallocate);       // manipulate file space
         allowed_syscalls.insert(__NR_fchmod);          // change permissions of a file
         allowed_syscalls.insert(__NR_fchown);          // change ownership of a file