3 ms·
> The BSDs, afaik, do not, That isn't just about the lack of guaranteed stability, as far as I understand it is considered a security feature. System calls tha
by josefx 5y ago
> The BSDs, afaik, do not,
That isn't just about the lack of guaranteed stability, as far as I understand it is considered a security feature. System calls that are not made through the libc may be actively blocked. So an attacker can't just use an exploit to inject a system call into a process, the call has to pass through the libc wrapper and in combination with ASLR that wont be trivial.
- 10000truths 5y agoA better way of accomplishing this would have been to randomize the syscall numbers on a per-process basis, and map a "syscall number translation table" into the process when loading the executable.