Except you don't have a fault each check: You only have a fault if a fork has occurred. Using getpid/gettid (or the keyring trick) you are doing a syscall for

Except you don't have a fault each check: You only have a fault if a fork has occurred. Using getpid/gettid (or the keyring trick) you are doing a syscall for every check.