这很麻烦，因为它使得拦截实际的原始系统调用操作变得更加困难。

This matters, because it's much more difficult to intercept actual raw system call operations.

youdao

TAMOS内核扩展拦截所有系统调用。

The TAMOS kernel extensions intercept all the system calls.

youdao

图1的流程图演示了TAMOS如何通过在内核层面拦截系统调用来实现安全层。

The flow chart in Figure 1 demonstrates how TAMOS implements the security layer by intercepting the system calls at the kernel level.

youdao