Oh, and it appears that with a little glue (attached), the SKAS3 and SKAS4 patches can co-exist. I currently have a host running with both SKAS3 and SKAS4 guests running on it. And if you apply SKAS3, SKAS4 and the glue to a guest, it should be able to run on SKAS3 or SKAS4 hosts (with SKAS4 being preferred if the host has both SKAS3 and SKAS4). Repeating Jeff's warning about SKAS4: "This is very experimental at this point. Don't let it near anything resembling a production system." (Though SKAS4 has been working quite well for me in testing.) RF arch/x86/ia32/ptrace32.c | 4 ++-- arch/x86/kernel/ptrace_32.c | 2 +- arch/x86/kernel/ptrace_64.c | 2 +- include/asm-x86/ptrace-abi.h | 2 +- include/asm-x86/ptrace.h | 2 +- mm/proc_mm.c | 2 +- 6 files changed, 7 insertions(+), 7 deletions(-)