add more system calls to whitelist