News for hackers. Stuff that matters.

A comment on Pledge and Unveil in OpenBSD [pdf]. Parent comment

Re:Pledge and Unveil in OpenBSD [pdf] by kworker on Sunday June 10, 2018 @02:06PM (#17279333)
On linux you can use firejail if it's necessary (or a container if it's needed).
[ Parent | on HN ]
Re:Pledge and Unveil in OpenBSD [pdf] by staticassertion on Sunday June 10, 2018 @02:17PM (#17279398)
This doesn't address what they just said - dropping privileges incrementally. Firejail is just a whole process filter applied at process start.
[ Parent | on HN ]