Looking at this list, the blocked syscalls do not seem to be too bad: https://github.com/aosp-mirror/platform_bionic/blob/master/libc/SECCOMP_BLACKLIST_APP.TXT

Looking at this list, the blocked syscalls do not seem to be too bad: https://github.com/aosp-mirror/platform_bionic/blob/master/libc/SECCOMP_BLACKLIST_APP.TXT https://github.com/aosp-mirror/platform_bionic/blob/master/l... This is mostly setgid/setuid, mount point and system clock related stuff. Except for syslog and chroit, I see no syscalls that you should be using in a user process anyway. So technically, this is clamping down Android, but it seems like a pretty reasonable restriction and far from a heavy handed approach.