Comment by Rufbdbskrufb473

I could be wrong, but I believe they were using a modified chroot with some preload libraries to intercept missing kernel calls.