Requirements: System Call Code
	• No user can interrupt it while it is running • No user can feed it data to make it – violate access control policies – stop serving other users • No user can replace or alter any system call code • No user can add functionality to the OS! • Data must NEVER be treated as code!