Unfortunately systrace does not work on sparc64, it fails to generate
   policies in ~/.systrace and if I try to use a policy file it will ignore all 
   restrictions! Has anyone looked into this? Is sparc64 the only affected
   platform? 


this is a sparc64 specific problem yes... you need to modify the
sparc64 syscall() functions to use trace_enter() and friends instead
of calling systrace/ktrace etc by hand... but it's not a simple edit
which is why it hasn't been done yet.



.mrg.