Le 23/07/2016 à 23:50, Paul Goyette a écrit :
I would assume that the checking of syscall restrictions would be done within the kauth(9) framework?
As I wrote it, it is not. It wouldn't be hard to switch to kauth, but I fear the performance cost would be higher.