Locking it down: per-thread cookie

• pass a per-thread cookie and its address

• kernel saves value from first call in each thread in struct proc, p_kbind_cookie

  • mismatch in later call? sigexit(SIGILL)

  • generate new value and copy it out to supplied address

• reserve space for the cookie in TCB

continued...