News for hackers. Stuff that matters.
Re:SELinux is unmanageable; just turn it off if it gets in y... by loeg on Wednesday April 27, 2022 @10:18AM (#31180194)
OpenBSD doesn't support syscalls from alternative libcs, so you reliably get consistent syscall behavior.

But I believe GP is mostly talking about pledge(2), a pretty easy way to implement common sets of seccomp-like restrictions, and unveil(2), an easy way to limit path visibility. These are OpenBSD security features that Linux does not have direct equivalents of.

There are no comments on this comment yet.