Implementation: system calls