Theo de Raadt (
tech@ regarding restrictions on the
addresses from which system calls can be made.
In addition to providing background,
the post contains information (and a patch)
for an imminent change - the introduction of a new
[link not working at the time of writing because change not yet committed],
which specifies the addresses from which individual
system calls are permitted.
pinsyscalls(2) will be called only from
the shared library linker,