3 ms·
From my point of view, this has a rather easy solution: Hard depend on musl. It's small (so it can be shipped everywhere) and focused on correctness, making it
by mixedCase 10y ago
From my point of view, this has a rather easy solution: Hard depend on musl.
It's small (so it can be shipped everywhere) and focused on correctness, making it a rather obvious choice for any security-oriented application.
- mixedCase 10y agoCan't edit anymore, but after discussing with musl developers, even this is inviable, since musl doesn't offer any guarantees on what syscalls are used on different systems. Apparently the only solution is for seccomp to offer a pledge(2)-like system.