Project for porting the pledge isolation mechanism for Linux
The author of the standard C library Cosmopolitan and the Redbean platform has announced the implementation of the pledge() isolation mechanism for Linux. Originally developed by the OpenBSD project, pledge allows selectively prohibiting applications from making unnecessary system calls (a sort of whitelist of system calls is created for the application while all other calls are denied). Unlike the access restriction mechanisms available in Linux, such as […]
