> > I'm not happy with the proliferation of magic process names. > > Instead, why not check if(p->procmode&0222). The startup script > > can then chmod -w /proc/importantguys/ctl. > Good idea, but that would allow a (malicious) user to protect it's own hogs, > maybe we should also check that it's not owned by eve? ugly too, but I can't > think of anything better.
There are so many other things a malicious user could do instead. Russ
