News for hackers. Stuff that matters.

A comment on Initial support for guided disk encryption in OpenBSD installer. Parent comment

Re:Initial support for guided disk encryption in OpenBSD ins... by Zurrrrr on Wednesday March 08, 2023 @10:35PM (#35078047)
I honestly can't even imagine putting all my faith in pledge and chroot like you do. It genuinely boggles my mind that you think this is a good approach.
[ Parent | on HN ]
Re:Initial support for guided disk encryption in OpenBSD ins... by ori_b on Wednesday March 08, 2023 @11:04PM (#35078215)
The only way a program can interact with the system is through system calls. Can you explain why irreversibly taking away a program's permissions to do anything interesting, especially as root, is a bad approach?
[ Parent | on HN ]
Re:Initial support for guided disk encryption in OpenBSD ins... by Zurrrrr on Thursday March 09, 2023 @12:20AM (#35078536)
Because that's not what you're doing. Now you're being downright dishonest lol.

What you're doing is limiting the system calls to whatever the program needs, which can still be quite a lot.

Please, just stop replying to me. I have no respect for you and don't wish to converse with you further.

[ Parent | on HN ]