[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

systrace enforce in 3.3 ?



Is there plan to enforce all base exec to use systrace in future releases ? (as more better security and suppress setuid/gid exec)

on 3.2, by default, nothing use sytrace (cf 'ps -ax|grep Ix')
and as far as i understand systrace usage, you need to launch each exec, prefixed by systrace, so an option (or not) for rc/rc.conf will be a good deal to ensure base services use it. but it's a lot more complex for common user software ... (or is ther any way to prefix all cmd easily ?)



Regards

		Julien


Note: if i try to use systrace with no option, i get the following error each time:
bash-2.05b$ systrace top
systrace: execvp: /usr/X11R6/bin/xsystrace: No such file or directory
Killed
(my box, being headless, i have no X)




Visit your host, monkey.org