pub unsafe fn userfaultfd(flags: UserfaultfdFlags) -> io::Result<OwnedFd>
userfaultfd(flags)
The call itself is safe, but the returned file descriptor lets users observe and manipulate process memory in magical ways.