Yang Zhang wrote: > Being a userspace process doesn't mean you can't prevent a process from making syscalls. And how do you propose to do that? What can stop "int 0x80" from appearing in the app's code?