it can be application-specific, without application modification.
check out "systrace" by Niels Provos.
it's useful but it really isn't flexible enough to remove the need for
applications to be able to specify policies.
i wonder how many command line options will be added to the
applications once you start adding up policy stuff... sendmail.cf
lookalike for every apps?
itojun
_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/ietf