4 ms·

This is basically what Capsicum (FreeBSD + Linux) and pledge (OpenBSD) are for. I agree that it would be nice to have a standard interface, but the functionali

This is basically what Capsicum (FreeBSD + Linux) and pledge (OpenBSD) are for. I agree that it would be nice to have a standard interface, but the functionality provided by those is sufficiently different that it's hard to imagine how a single API could be created which usefully covers both.

bringtheaction 9y ago
Speaking of which, anyone have examples of how to restrict a process to using stdin and stdout only with Capsicum and pledge?