Fix regression in new code
    
    CVE-2005-4889-rpm-fails-to-drop-SUID-SGID-bits-on-package fails with the
    new code as older glibc versions don't support AT_SYMLINK_NOFOLLOW for
    fchmodat. Fixed upstream as
    
    https://github.com/rpm-software-management/rpm/pull/2759
    
    Resolves: RHEL-9561 RHEL-9563 RHEL-9565