3 ms·
Pledge is much easier to user that seccomp-bpf and is now forced in more than half of the binary distribuited in the base system. Also, there is a big differenc
by allep 11y ago
Pledge is much easier to user that seccomp-bpf and is now forced in more than half of the binary distribuited in the base system.
Also, there is a big difference between having a technology and enforcing the technology: Seccomp has been included in linux for a very long time, but is ignored by most developers and not used except in specific instances (ie chrome as you pointed out)