One of the more exciting features in OpenBSD is systrace(1), a system call access manager.
With systrace, a system administrator can say which system calls can be made by which programs,
and how those calls can be made.
Proper use of systrace can greatly reduce the risks inherent in running poorly written
or exploitable programs.
欢迎光临 Chinaunix (http://bbs.chinaunix.net/) | Powered by Discuz! X3.2 |