Making 'syscall' a Privilege not a Right

Fangfei Yang, Anjo Vahldiek-Oberwagner, Chia-Che Tsai +2

Browsers, Library OSes, and system emulators rely on sandboxes and in-process isolation to emulate system resources and securely isolate untrusted components. All access to system…