Author:
Source
Theo de Raadt (deraadt@)
posted
to tech@ regarding restrictions on the
addresses from which system calls can be made.
In addition to providing background,
the post contains information (and a patch)
for an imminent change – the introduction of a new
syscall,
pinsyscalls(2)
[link not working at the time of writing because change not yet committed],
which specifies the addresses from which individual
system calls are permitted.
pinsyscalls(2) will be called only from
the shared library linker,
ld.so(1).
