OpenBSD's Pledge and Unveil from Python

Re:OpenBSD's Pledge and Unveil from Python by dbt00 on Wednesday September 15, 2021 @01:29AM (#28535572)

Yes. That's awesome!

I was referring to the OpenBSD devs trying to hack pledges into other people's software by trying to guess what capabilities it needs while porting. That's not a good thing to try to do -- see also all the various attempts at guessing seccomp profiles in the Linux world, which has the same problem.

[ Parent | on HN ]

Re:OpenBSD's Pledge and Unveil from Python by ben_bai on Wednesday September 15, 2021 @07:46AM (#28537867)

Has been done to some 3rd party applications. Notably Chromium is pledged an unveiled, Firefox (unveil), pdf readers, compression tools, mail clients, ...

grep the ports tree for pledge patches.

[ Parent | on HN ]

Re:OpenBSD's Pledge and Unveil from Python by ghoward on Wednesday September 15, 2021 @10:06AM (#28539194)

I see what you mean now, and I think you are completely correct in that!

[ Parent | on HN ]