Issue #22181: On Linux, os.urandom() now uses the new getrandom() syscall if

available, syscall introduced in the Linux kernel 3.17. It is more reliable
and more secure, because it avoids the need of a file descriptor and waits
until the kernel has enough entropy.