Re: unexporting sys_call_table a good idea?

[Pete Zaitcev]

> [...] it is,
> rather than being able to simply compile an external module (which
> disables ptrace) and load it on affected systems, I am forced to
> recompile an entire kernel, install it on the affected systems, and
> reboot them all...
> 
> Thanks,
> Paul

This is fallacy. How is exporting syscall table going to help you?
You still have to recompile entire kernel, install it on the
affected systems, and reboot them all, and only then you can
use your module. Wouldn't it be easier just to add a sysctl
which disables ptrace, instead?

-- Pete