Wow, that's a cool trick - personally, I didn't know this is possible. Does it mean a system call and context switch for every check though? One thing I like a

Wow, that's a cool trick - personally, I didn't know this is possible. Does it mean a system call and context switch for every check though? One thing I like about the MINHERIT_ZERO/MADV_WIPEONFORK approach is that it's basically just a low-cost cache-friendly memory lookup at run-time, the only expense is at fork time.