DTrace features a compiler that generates a byte code that is run in the kernel.
This code is assured to be “safe” by the compiler. For example, no loops
are allowed, and only specific kernel state modifications are allowed when
specifically requested. Only users with DTrace “privileges” (or “root” users)