News for hackers. Stuff that matters.

A comment on I Built an Ld_preload Worm. Parent comment

Re:I Built an Ld_preload Worm by saagarjha on Monday April 29, 2024 @10:49PM (#40206758)
Entitlements cannot protect against things in your own process. They are always used to gate clients either across a kernel-user or XPC boundary.
[ Parent | on HN ]
Re:I Built an Ld_preload Worm by jiveturkey on Tuesday April 30, 2024 @01:05PM (#40213319)
isn't that exactly what the parent was asking for? limiting syscalls.

EDIT: oh. but not limited to the caller from a specific system library.

[ Parent | on HN ]