Discussion Systrace easy to use. All my third party software runs under systrace. $ ps ax | grep Ix 11854 p2 Ix 0:24.62 gaim 4586 p2 Ix 0:00.11 ispell -a 20870 p4 Ix 0:00.01 /bin/sh /usr/local/bin/opera 6850 p4 Ix 0:10.32 /emul/linux/usr/local/lib/opera/5.05_tp1/opera-static 622 p8 Ix+ 0:06.37 silc 'x' in ps indicates systraced process. Monkey.org uses systrace for all user shells. More than 200 hundred users. For system services like httpd, too.