48 #define ALLOW_RULE(call) \  macro
83 	ALLOW_RULE(access);  in enable_sandbox()
84 	ALLOW_RULE(brk);  in enable_sandbox()
85 	ALLOW_RULE(close);  in enable_sandbox()
86 	ALLOW_RULE(dup2);  in enable_sandbox()
87 	ALLOW_RULE(exit);  in enable_sandbox()
88 	ALLOW_RULE(exit_group);  in enable_sandbox()
90 	ALLOW_RULE(faccessat);  in enable_sandbox()
92 	ALLOW_RULE(fcntl);  in enable_sandbox()
93  	ALLOW_RULE(fcntl64);  in enable_sandbox()
95 	ALLOW_RULE(fstat);  in enable_sandbox()
97  	ALLOW_RULE(fstat64);  in enable_sandbox()
99 	ALLOW_RULE(fstatat64);  in enable_sandbox()
101 	ALLOW_RULE(futex);  in enable_sandbox()
102 	ALLOW_RULE(getdents);  in enable_sandbox()
104 	ALLOW_RULE(getdents64);  in enable_sandbox()
118 	ALLOW_RULE(lseek);  in enable_sandbox()
119  	ALLOW_RULE(_llseek);  in enable_sandbox()
120 	ALLOW_RULE(lstat);  in enable_sandbox()
121  	ALLOW_RULE(lstat64);  in enable_sandbox()
122 	ALLOW_RULE(madvise);  in enable_sandbox()
123 	ALLOW_RULE(mmap);  in enable_sandbox()
124  	ALLOW_RULE(mmap2);  in enable_sandbox()
125 	ALLOW_RULE(mprotect);  in enable_sandbox()
126 	ALLOW_RULE(mremap);  in enable_sandbox()
127 	ALLOW_RULE(munmap);  in enable_sandbox()
129 	ALLOW_RULE(newfstatat);  in enable_sandbox()
131 	ALLOW_RULE(open);  in enable_sandbox()
132 	ALLOW_RULE(openat);  in enable_sandbox()
133 	ALLOW_RULE(pread64);  in enable_sandbox()
134 	ALLOW_RULE(read);  in enable_sandbox()
135 	ALLOW_RULE(readlink);  in enable_sandbox()
137 	ALLOW_RULE(readlinkat);  in enable_sandbox()
139 	ALLOW_RULE(rt_sigaction);  in enable_sandbox()
140 	ALLOW_RULE(rt_sigprocmask);  in enable_sandbox()
141 	ALLOW_RULE(rt_sigreturn);  in enable_sandbox()
142 	ALLOW_RULE(select);  in enable_sandbox()
143 	ALLOW_RULE(stat);  in enable_sandbox()
144 	ALLOW_RULE(statx);  in enable_sandbox()
145 	ALLOW_RULE(stat64);  in enable_sandbox()
146 	ALLOW_RULE(sysinfo);  in enable_sandbox()
147 	ALLOW_RULE(umask);	// Used in file_pipe2file()  in enable_sandbox()
148 	ALLOW_RULE(getpid);	// Used by glibc in file_pipe2file()  in enable_sandbox()
149 	ALLOW_RULE(getrandom);	// Used by glibc in file_pipe2file()  in enable_sandbox()
150 	ALLOW_RULE(unlink);  in enable_sandbox()
151 	ALLOW_RULE(utimes);  in enable_sandbox()
152 	ALLOW_RULE(write);  in enable_sandbox()
153 	ALLOW_RULE(writev);  in enable_sandbox()
158 	ALLOW_RULE(gettid);  in enable_sandbox()
159 	ALLOW_RULE(rt_sigtimedwait);  in enable_sandbox()