Comment by pjmlp

Except that you are only allowed to use these Linux calls,

https://github.com/aosp-mirror/platform_bionic/blob/master/d...

Anything not white listed on the LinuxSE and seccomp configurations, just has as outcome killing the "naughty" app.