It does try to avoid breaking needed functionality by finding and disabling something unique to the bad request: > testing system call block policies for any u

It does try to avoid breaking needed functionality by finding and disabling something unique to the bad request: > testing system call block policies for any unique calls or call parameters found Obviously it can only work with data it has so if your system has some rarely-exercised code paths it might break those, but at least it won't break the 99% use-cases?