Re:Unveil(2) – Unveil parts of a restricted filesystem view
by gshrikant on Thursday July 19, 2018 @01:35AM
(#17564128)
Pledge (previously `tame`) did use bitmasks in its earlier iterations. See Ted Unangst's post about it: https://www.tedunangst.com/flak/post/string-interfaces
[ Parent
| on HN ]
Re:Unveil(2) – Unveil parts of a restricted filesystem view
by rurban on Thursday July 19, 2018 @11:59AM
(#17567523)
I know this change, that's why I bothered. He can do this in his private app as he likes, but not in the libc which is the most widely copied libc. It's about security, consistency and being a positive role model.
Re:Unveil(2) – Unveil parts of a restricted filesystem view
by rjvbk on Thursday July 19, 2018 @03:35AM
(#17564482)
I don't like it, it's un-C-like.
Re:Unveil(2) – Unveil parts of a restricted filesystem view
by arcticbull on Thursday July 19, 2018 @06:03AM
(#17565009)
Too many vowels? Would you prefer 'pldg' ? ;) Unless you meant the stringly-typed arguments in which case I'm 100% with you, they're asking for trouble.