The real fix is really to use a LSM for custom jails. Trying to make ptrace secure is trying to make a sieve wather tight by plugging the individual holes one by one. It's simply not suitable for this. -Andi -- ak@xxxxxxxxxxxxxxx -- Speaking for myself only. -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html