Software Sandboxing: The Basics (2025)

(blog.emilua.org)

36 points | by mococa 2 hours ago

2 comments

jmclnx 1 hour ago
Interesting no mentioned about OpenBSD pledge(2), unveil(2). By far the easiest sandboxing out there. An example:
```
    #ifdef OpenBSD
      if(pledge("stdio rpath wpath cpath",NULL) == -1)
        err(1,"pledge\n");
    #endif
```
Very easy, all the other examples seem rather complex to me. unveil(2) is just as easy.