jmclnx 39 minutes ago Interesting no mentioned about OpenBSD pledge(2), unveil(2). By far the easiest sandboxing out there. An example: #ifdef OpenBSD if(pledge("stdio rpath wpath cpath",NULL) == -1) err(1,"pledge\n"); #endif Very easy, all the other examples seem rather complex to me. unveil(2) is just as easy.
Interesting no mentioned about OpenBSD pledge(2), unveil(2). By far the easiest sandboxing out there. An example:
Very easy, all the other examples seem rather complex to me. unveil(2) is just as easy.