tomoyo: stop using sysctl()

Recent kernel ports have started omitting this old syscall, and glibc
makes it an error to try to include that header when it's unavailable.
So convert over to reading/writing the /proc/sys/ paths directly.

Signed-off-by: Mike Frysinger <vapier@gentoo.org>