News for hackers. Stuff that matters.

A comment on SELinux is unmanageable; just turn it off if it gets in your way. Parent comment

Re:SELinux is unmanageable; just turn it off if it gets in y... by staticassertion on Wednesday April 27, 2022 @08:51AM (#31179220)
How is the libc issue specific to linux? OpenBSD has a libc too.
[ Parent | on HN ]
Re:SELinux is unmanageable; just turn it off if it gets in y... by loeg on Wednesday April 27, 2022 @10:18AM (#31180194)
OpenBSD doesn't support syscalls from alternative libcs, so you reliably get consistent syscall behavior.

But I believe GP is mostly talking about pledge(2), a pretty easy way to implement common sets of seccomp-like restrictions, and unveil(2), an easy way to limit path visibility. These are OpenBSD security features that Linux does not have direct equivalents of.

[ Parent | on HN ]