Re:SELinux is unmanageable; just turn it off if it gets in y...
by loeg on Wednesday April 27, 2022 @10:18AM
(#31180194)
OpenBSD doesn't support syscalls from alternative libcs, so you reliably get consistent syscall behavior.
But I believe GP is mostly talking about pledge(2), a pretty easy way to implement common sets of seccomp-like restrictions, and unveil(2), an easy way to limit path visibility. These are OpenBSD security features that Linux does not have direct equivalents of.
But I believe GP is mostly talking about pledge(2), a pretty easy way to implement common sets of seccomp-like restrictions, and unveil(2), an easy way to limit path visibility. These are OpenBSD security features that Linux does not have direct equivalents of.