1. A computer-implemented method comprising: validating, by a computer system, parameters of a system call directed to a kernel using a system call wrapper, the parameters supplied by a user process in user-space in a memory of the computer system; and protecting, by the computer system, the parameters from being accessed by processes in the user-space after the parameters have been validated by the system call wrapper.