[Systrace] link() policies with multiple filenames possible?

[Nikolay Sturm]

Hi!

link() has two degrees of freedom: target file and link name. How do I
differentiate these in a systrace policy?

My goal is to make sure processes only create hardlinks in a certain
directory structure and that these do not point outside this struct. In
another rule I want to allow symlinks to point outside. Is this possible
with systrace?

Nikolay

-- 
OpenPGP: 0x2036A3A7 - 64E4 7D77 F5C0 EA47 A901  51EF 6E54 6E4F 2036 A3A7
"The XFS you see in the kernel is not SGI-XFS but the X Font Server."
some user on misc at openbsd.org