Notes:
The reason that 'honeypot' mode locates the process stack in the same place that it is on the host is that stack smash attacks must work. If they didn't, UML would not be useful as a honeypot because it would be impossible (or at least difficult) to break into them.