more restrict system call for SYS_open and SYS_execve