3 ms·
From what I understand BSD has a feature which verifies calling address of syscall and blocks if it doesn't comes from libc thus achieving similar result to you
by Karliss 6y ago
From what I understand BSD has a feature which verifies calling address of syscall and blocks if it doesn't comes from libc thus achieving similar result to your suggestion with randomization.