It depends on specific WASM runtime implementation, but usually you have to be explicit about allowing each syscall.