Re: systrace replacement

[christos%astron.com@localhost (Christos Zoulas)]

In article <C1812C7B-DD2A-438B-8273-422F75473D2B%webkeks.org@localhost>,
Jonathan Schleifer  <js-netbsd-users%webkeks.org@localhost> wrote:
>-=-=-=-=-=-
>
>One more question: If there are security issues in systrace, I wonder  
>why OpenBSD is still shipping with it? At least they're known to be  
>very careful about security. Did they fix those issues? Wouldn't it be  
>possible to backport the fixes, if there are any?

You can ask them. Last related entry in the systrace blog is:

http://www.provos.org/index.php?/archives/34-Evading-System-Sandbox-Containment.html

christos