> Unless I am sorely mistaken, systrace can be broken by any user with > enough priviliges to run two processes.
Well, then you are sorely mistaken. One of your processes can break the other one. What's the big deal. Where's the priviledge escalation? There is none. You overstate the situation.