Restrict syscalls works.