News for hackers. Stuff that matters.

A comment on Pledge and Unveil in OpenBSD [pdf]. Parent comment

Re:Pledge and Unveil in OpenBSD [pdf] by agumonkey on Sunday June 10, 2018 @12:23PM (#17278808)
brings me to the next question: are there linux equivalent ?
[ Parent | on HN ]
Re:Pledge and Unveil in OpenBSD [pdf] by 2trill2spill on Sunday June 10, 2018 @12:39PM (#17278875)
There's Capsicum for Linux[1]. Its a port of Capsicum[2] from FreeBSD to Linux. Capsicum was a joint project between the FreeBSD foundation, Cambridge and Google to create a hybrid capabilities framework. But Capsicum allows developers to do the same privilege dropping that pledge does. However Capsicum is more fine grained then pledge so its less easy to use. Also Capsicum for Linux is also out of tree currently.

[1]: http://www.capsicum-linux.org/ [2]: https://www.freebsd.org/cgi/man.cgi?capsicum(4)

[ Parent | on HN ]
Re:Pledge and Unveil in OpenBSD [pdf] by jpeeler on Sunday June 10, 2018 @10:01PM (#17281210)
Link #1 is neat for Linux users, but Google seems to have stopped updating Capsicum after v4.11 (which was released April 2017).
[ Parent | on HN ]
Re:Pledge and Unveil in OpenBSD [pdf] by kworker on Sunday June 10, 2018 @02:07PM (#17279340)
The firejail is the closest i know.
[ Parent | on HN ]