2 ms·
That's definitely a way better strategy than what I said -- when your code is well-designed-enough for it to work.
by kentonv 11y ago
That's definitely a way better strategy than what I said -- when your code is well-designed-enough for it to work.
- justincormack 11y agoThat is the Capsicum model, disable open when you go into secure mode. Note you can allow passing of file descriptors and an external program can open new files for you if you allow this. Many single task programs do not need to open files after initialisation.