- Make localtime(3) to work in sandbox.
- Move strerror(3) initialization to its own function.
Close uniq(1) in the capability mode sandbox and limit descriptors using
capability rights.