cruft
when disabling a syscall for ENOSYS, handle biarch too

This isn't strictly the right thing to do here, but it works around
an ugly infinite loop bug that I don't have a good fix for yet.
check for syscalls still enabled in loop
handle tmp perms better