Hijack of privacy capsule syscalls