Re:OpenBSD system-call-origin verification
by clarry on Tuesday December 24, 2019 @05:00PM
(#21875199)
If an attacker can ship a malicious binary and run it on the target system, then this defense mechanism is 100% pointless.
It's trying to mitigate exploits, but if your attacker is already running arbitrary code, they don't need those exploits. They're way past that phase.
If someone can show this is done by configuring the local dynamic linker, so that the end user has full control of the mechanism, then I'm all ears.