> >> it can be application-specific, without application modification. > >> check out "systrace" by Niels Provos. > >> > it's useful but it really isn't flexible enough to remove the need for > applications to be able to specify policies. i wonder how many command line options will be added to the applications once you start adding up policy stuff... sendmail.cf lookalike for every apps? itojun _______________________________________________ Ietf@xxxxxxxx https://www1.ietf.org/mailman/listinfo/ietf