LKM and userland tool, used to alter sys_call_table, replace unlinkat syscall with one that does nothing for specified user