You&#x27;re right, I hadn&#x27;t checked this list.  If open() were missing from the list it might be much harder to do damage outside the current VM.  It&#x27;s the most critical one in this whitelist IMO.  Many&#x2F;most of the remaining would have their scope limited to currently open fds&#x2F;this-process&#x27; maps&#x2F;segments.