On Thu, Jan 04, 2018 at 09:36:27PM -0800, John Reiser wrote:
4) All code must be generated by a compiler that enforces the probing
policy,
and all language support run-time routines also must enforce the policy.
No mixing of old or foreign compilers with the new gcc.
No mixing of old or foreign C libraries with the new glibc.
Direct use by an app developer of the 'clone' system call is forbidden.
Hmmm, systemd uses clone (the raw syscall) quite a bit. And libsystemd
is linked into quite a few things in the distro. Based on what you
write here, this could be a big problem.
Zbyszek