Subject: Re: procfs/ptrace/systrace/ktrace diff
To: None <>
From: YAMAMOTO Takashi <>
List: tech-kern
Date: 11/26/2006 23:27:30
> >>>> proc_isunder() should be in the secmodel.
> >>> do you mean chroot(8) should be a part of secmodel?
> >> it already kinda is. we don't provide any context (yet) but there is
> >> a chroot action. I would like to move proc_isunder() to the secmodel
> >> code, yes.
> > 
> > i don't see how it could be done efficiently.
> are you talking about the entire chroot mechanism or just chroot
> enforcement for the four subsystems in question?

the former.