3 ms·
I really hope other systems will adopt pledge. Of all the selective privilege dropping mechanisms I know of, pledge seems to be the least complicated to use.
by krylon 8y ago
I really hope other systems will adopt pledge. Of all the selective privilege dropping mechanisms I know of, pledge seems to be the least complicated to use.
- pjmlp 8y agoMojave has a new security aware runtime for its applications. Bringing sandboxing to all applications and requiring listing of entitlements and digital signing. Microsoft has decided if the apps don't come to the store, the store goes to the apps, and are merging Win32 with UWP sandboxing concepts via Windows containers and the new MSIX package format. Android sandboxing is still the most complicated one.