1mmap: 1
2open: 1
3read: 1
4close: 1
5fstat: 1
6mprotect: 1
7munmap: 1
8stat: 1
9write: 1
10lseek: 1
11brk: 1
12fcntl: 1
13execve: 1
14sendto: 1
15# Allow domain == PF_FILE || domain == PF_INET || domain == PF_NETLINK
16socket: arg0 == 1 || arg0 == 2 || arg0 == 16
17connect: 1
18poll: 1
19access: 1
20arch_prctl: 1
21wait4: 1
22rt_sigaction: 1
23exit_group: 1
24rt_sigprocmask: 1
25clone: 1
26# Allow request == RTC_SET_TIME || request == FIONREAD
27ioctl: arg1 == 0x4024700a || arg1 == 0x541b
28getuid: 1
29exit: 1
30rt_sigreturn: 1
31rename: 1
32select: 1
33setgid: 1
34settimeofday: 1
35restart_syscall: 1
36setresgid: 1
37setgroups: 1
38setsockopt: 1
39bind: 1
40recvfrom: 1
41setresuid: 1
42nanosleep: 1
43clock_gettime: 1
44clock_settime: 1
45futex: 1
46getrlimit: 1
47set_robust_list: 1
48set_tid_address: 1
49