Hacker News Reader

There must be a safer way to do this - a kernel module and custom ioctls, or what is it?

Yes, create a kernel module which registers a custom device, then change those syscalls to ioctls on that device.

Custom device inode with custom ioctls. This is how binder works on Android.