VFS hijacking - base

[lyte]

Currently, the syscall table is modified to redirect to the malicious syscalls versions.
Look for a stealthier way to hijack the system.