[patch v4 4/4] Add system-wide tunables: Filters

[Florian Weimer]

* DJ Delorie:

> Florian Weimer <fweimer@redhat.com> writes:
>> The program_short_invocation_name matching/configurability/filter.
>
> Would using the full path to the executable change this?
> I.e. /proc/self/exe as-is?

We'd need this for the AT_SECURE enhancement discussed in another
thread.

>> The general question remains: why not use wrapper scripts for this?
>
> The scenario for which this feature was added is thusly:
>
> * You want to set a non-overridable tunable for the whole system
>
> * One key program crashes with that tunable set
>
> * You'd rather make an exception for that program than deal with making
>   that tunable overridable and overriding it, or waiting for that
>   program to be fixed.

Makes sense, I've changed my opinion on this.

Thanks,
Florian