Thursday, February 19, 2004

Systrace Support for FreeBSD

While writing the last chapter of my book I checked into the status of Systrace support in FreeBSD. I mentioned Systrace last August. Since then, Vladimir Kotal has been working on porting Systrace to FreeBSD. I haven't tried his patches yet but I applaud his work. Systrace is a system-call monitoring and enforcement mechanism that brings a great deal of security functionality to Unix systems.