This will likely easily be possible once we're based on Debian version 9 codename Stretch.
Source:
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=760299
- https://packages.debian.org/search?keywords=systemd
Once available, its a matter of adding whitelisted calls using SystemCallFilter= in a service unit file.
strace logs may help further debugging:
https://forums.whonix.org/t/cpfpd-data-options-control-port-filter-python-hardening/1146
Worth checking out... Quote: Tails report for January, 2016
Change to systemd as init system and use it to:
- Sandbox many services using Linux namespaces and make them harder to exploit.