Intercept a system call using a loadable kernel module.