3 ms·
This is incredibly off-topic, but can I use pledge as a sandbox by pledging and then execve-ing?
by giornogiovanna 8y ago
This is incredibly off-topic, but can I use pledge as a sandbox by pledging and then execve-ing?
- throwawaypled 8y agoif you pass the `execpromises` parameter, and make sure that the flags DO NOT include the ability to further execve() (the `exec` flag), then yes, but openbsd pledge flags are not implicitly inherited like linux seccomp filters.