allow 'make' in libexecwhitelist
rofs.rb: writes ld.so.preload.
libexecwhitelist: do nothing if readlink fails
lrun.cc: remove unused comment