Hacker Blog Posts

Chris Wellons personal blog

OpenBSD's Pledge and Unveil from Python

nullprogram.com 5 min read

Years ago, OpenBSD gained two new security system calls, pledge(2) (originally tame(2) ) and unveil . In both, an application surrenders capabilities at run-time. The idea is to perform initialization like usual, then drop capabilities before handling untrusted input, limiting unwanted side effects. This feature is…
Read on nullprogram.com → Discuss on HN (40) Archived copy
Points
142
HN comments
40
Submissions
1
Cited by
0 commenters

Security & PrivacySoftware Engineering2021

On Hacker News

SubmittedTitle on HNPointsComments
Sep 15, 2021OpenBSD's Pledge and Unveil from Python by todsacerdoti14240

More from Chris Wellons

All 75 posts →

Related posts from the same era