# @file-system (systemd commit 1a1b13c957, not in any release yet)
SystemCallFilter=open close stat stat64 fstat fstat64 lstat lstat64 creat mkdir getdents getdents64 getcwd access fcntl fcntl64 mmap munmap readlink
# event loop (is there data on a socket?)
-SystemCallFilter=@io-event
+SystemCallFilter=@io-event ioctl
# network connections
SystemCallFilter=@network-io
# JIT code generation