> Umm. But the exact same is true of "LSM for custom jail". It's a > f*&^ing disaster, and it's a whole lot more complicated than ptrace. > > Plus it can't even do what ptrace does, so what's the point? There's It can securely enable syscall auditing which can catch all syscalls (however you only get race free memory arguments for the ones with LSM hooks at the right place). Really need both. I agree it's not easy to get tight (and also not pretty), but you have a lot better chance doing it this way than with ptrace. -Andi -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
