Abstract: A method for preventing time of check to time of use exploits includes receiving a system call from a user space at a system call intercept and copying user space parameters from the user space to a kernel space responsive to the system call. The method also includes copying the user space parameters from the kernel space to a secure location in the user space, receiving the user space parameters from the secure location at the system call intercept, and executing the system call based on the received user space parameters. A computer readable medium including computer readable code and a system for executing the method steps are also disclosed.

Abstract: A method, an apparatus, a system, and a computer program product are presented for determining whether a file system, which contains a file system resource that is to be the target of a file system operation, is currently mounted by a data processing system. A first kernel-level process obtains unique identifying information for a file system that contains the target file system resource, and a second kernel-level process manages a data structure having an entry for each file system that the kernel of the data processing system recognizes as being currently mounted. The data structure is searched by the first kernel-level process for an entry having information that matches the unique identifying information such that the first kernel-level process determines that the file system is mounted in response to finding an entry having information that matches the unique identifying information.

Abstract: A method, an apparatus, a system, and a computer program product are presented for determining whether a file system resource is a file system resource that is contained within a file system that can be automounted by a data processing system. A target file system resource is identified, after which a first file system data structure that represents a file system that contains the target file system resource is identified using a file system resource data structure that represents the target file system resource. If it is determined that the first file system data structure identifies a file system resource data structure that represents an automount point, the target file system resource is marked as an automount file system resource. File system resource data structures that represent hierarchically more inclusive file system resources are traversed if necessary to search for an automount point.