OpenBSD 6.2 - Hackdot

Re:OpenBSD 6.2 by eugeneionesco on Friday October 06, 2017 @12:59PM (#15418323)

Of course it does, seccomp, developed way before pledge :))

[ Parent | on HN ]

Re:OpenBSD 6.2 by sydney6 on Friday October 06, 2017 @03:50PM (#15419841)

And where is seccomp used (by default)?

[ Parent | on HN ]

Re:OpenBSD 6.2 by ac29 on Friday October 06, 2017 @06:10PM (#15420838)

Chrome and Firefox both use seccomp by default on Linux.

[ Parent | on HN ]

Re:OpenBSD 6.2 by sydney6 on Saturday October 07, 2017 @06:01PM (#15425931)

OpenBSD has around 500 programs with pledge support in base.

edit: and this number does not even include the ports available with pledge support, among others chromium.. and the fact that they were capable of adding pledge support this quickly says a lot, imho, about the implementation differences between libseccomp and pledge.

[ Parent | on HN ]

Re:OpenBSD 6.2 by anthk on Friday October 06, 2017 @07:32PM (#15421235)

Also, pledge is everywhere. Seppconf, not. And SeLinux just in few distros.

Pledge is instrinsic. You have it right from the beggining with C and Perl. And it's straightforward to use.

[ Parent | on HN ]

Re:OpenBSD 6.2 by anthk on Friday October 06, 2017 @07:27PM (#15421210)

Not the same approach.

[ Parent | on HN ]