Restricting which system calls exist

• A

  It prevents the process from ever accessing any single file that it ought not to be reading

• B

  It stops the process from using too much memory

• C

  It shrinks the kernel attack surface, so a bug in an unreachable call cannot be exploited

• D

  It makes system calls faster by skipping permission checks