On Sun, 03 May 2015 20:44:25 -0000, Loganaden Velvindron wrote: > OpenBSD already has systrace.
Last I checked, systrace doesn't work well with multi-threaded programs and was trivial to bypass. The basic design where you have a userland monitor process is flawed. Something where a policy is pushed into (and enforced by) the kernel would be better. - todd
