Created attachment 369998 [details, diff] glibc-2.17-SOCK_NONBLOCK.patch As far as I can tell, SOCK_NONBLOCK support was added to glibc in May 2008, but only in November/December 2013 was support added to the HPPA kernel, which now makes linux-headers and glibc clash. Attached are two (conflicting) patches, both of which make sys-process/audit compile as it should, although I can't tell which is the proper way of doing this. Looking through the glibc patch archives, the #undef road was previously taken to get alpha up to speed. Now why sys-process/audit wants to talk to linux-headers or other kernel sources directly is beyond me, but that is the way the ebuilds and build system work for now.
Apparently it did go into kernel 3.7, too.
Comment on attachment 369998 [details, diff] glibc-2.17-SOCK_NONBLOCK.patch glibc is behaving correctly. we aren't going to apply this patch.