Re:Tab completion in OpenBSD's ksh
by stock_toaster on Tuesday May 02, 2017 @04:48PM
(#14250422)
Is there much benefit from pledging a shell?
I thought a fork/exec (seems like a core requirement for a shell) didn't inherit the pledge from the parent?
> promise: exec
> Allows a process to call execve(2). Coupled with the proc promise,
> this allows a process to fork and execute another program. The new
> program starts running without pledge active and hopefully makes
> a new pledge()
> -- openbsd pledge(2) manpage
Re:Tab completion in OpenBSD's ksh
by brynet on Tuesday May 02, 2017 @05:07PM
(#14250606)
Of course, it's a shell. Shells need to execute other programs, but the shell itself doesn't need to open sockets, or use random ioctl calls, or other privileged things.
I thought a fork/exec (seems like a core requirement for a shell) didn't inherit the pledge from the parent?