The tamper$-$proof requirement of a trusted computing base $($TCB$)$ requires that

Group of answer choices

user code cannot make system calls that can make changes to TCB data structures..

TCB code must not make any changes to TCB data structures

user code cannot directly modify TCB code or data.

user code can directly modify only TCB data but not code.