`Sandbox 1` in Tor 0.2.7.6 should not filter `getsockopt` syscall

In Tor version 0.2.7.6 (git-605ae665009853bd) on Debian sid, setting Sandbox 1 in torrc filters the getsockopt syscall, which is necessary for applications such as torsocks, xmpp-client, and TorBirdy. This syscall should be re-un-blacklisted from the seccomp policy. I say 're' because I confirmed it works in Debian Jessie running version 0.2.7.6-1~d80.jessie+1.

Trac:
Username: fowlslegs

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information