Re: Syscall security

Joe McClain
2003-09-26T15:18:32Z

* Maciej Zenczykowski <maze@cela.pl> [030926 10:06]:
> Hi,
>
> I'm wondering if there is any way to provide per process bitmasks of
> available/illegal syscalls. Obviously this should most likely be
> inherited through exec/fork.
>
> For example specyfying that pid N should return -ENOSYS on all syscalls
> except read/write/exit.

Look at Systrace. http://www.citi.umich.edu/u/provos/systrace/

- Joe