Re: [Qemu-devel] syscall filtering

[J. Mayer]

On Tue, 2004-11-23 at 15:19, Magnus Damm wrote:
> Hello,
> 
> While Piotrek is thinking about securing the system emulator, I am more
> interested in syscall filtering. I have not thought about it too much,
> but the idea (if possible) would be to run qemu as a filter for certain
> binaries on your machine. Basically, you run i386-user with filters on a
> i386 machine.

What about systrace ?
http://www.citi.umich.edu/u/provos/systrace/index.html

You never need an emulator to filter syscalls on Unix: take a look to
ptrace syscall, especially PTRACE_SYSCALL request, all needed features
are already there...
-- 
J. Mayer <address@hidden>
Never organized