Re: dtrace

[Gerd Möllmann]

Björn Bidar <bjorn.bidar@thaodan.de> writes:

> Would it possible to limit the scope with a wrapper in whatever
> instances which has the capabilities? I don't know about dtrace
> but for ptrace there is CAP_SYS_PTRACE.
>
> Another option would be to use polkit to limit the access of the
> wrapper, e.g. by asking pkexec to start the wrapper. Using capabilities
> plus polkit without pkexec to only check for the permission would
> require the least amount of permissions.

AFAIK, macOS doesn't have Linux capabilities(7).