On Mon, 17 Jan 2005 22:36:51 EST, Colin Walters said:
My opinion is that it is essentially an inferior implementation of
much
of the functionality SELinux provides. It does have some additional
features like the dynamic privilege elevation that seem possibly useful,
but I don't think it makes sense to use systrace just for that.
I admit not having read the Systrace stuff yet. Are there any features that
SELinux would benefit from implementing similar functionality?