OpenBSD’s Pledge and Unveil from Python

Years ago, OpenBSD gained two new security system calls, pledge(2)
(originally tame(2)) and unveil. In both, an application
surrenders capabilities at run-time. The idea is to perform initialization
like usual, then drop capabilities before handling untru… Read more

Similar