drop unused system calls
unwhitelist `uname` and `getxattr` system calls