Nilesh.org Notes on technology and everything else

Systrace, as you know(if you are hard core about OpenBSD and security) is a tool for sandboxing local applications running locally( as opposed to the java sandbox, which runs a remote program locally). They now have a pretty GUI to Systrace. You can assign access parameters for a purticular application. If the program is asking access to a new resource, the Systrace window pops up. You can deny / allow depending on whether that app needs the resource. Thus policies are redefined on the fly. It has basic host based intrusion detection features and can alert over the network. A white paper on systrace.