3 comments

[ 54.3 ms ] story [ 211 ms ] thread
Hmmm wouldn't you want to intercept syscalls at the kernel level like AppArmor instead of at the application level?
This is cool though
Thanks!

Yes you can (and should) also intercept at kernel level, but the kernel can't tell which of your app's dependencies is responsible for the call, only the application knows that.