3 ms·
The point is that they shouldn't be confused as having the same goal. The reason object capabilities are so difficult to integrate is that you basically have to
by anaphor 7y ago
The point is that they shouldn't be confused as having the same goal. The reason object capabilities are so difficult to integrate is that you basically have to refactor all of your software to use a different style of programming. I don't think that means that pledge is somehow superior. They do two completely different things.
For an example of an active project using ocaps see:
https://fuchsia.googlesource.com/fuchsia/ https://fuchsia.googlesource.com/fuchsia/
https://sel4.systems/ https://sel4.systems/
- notaplumber 7y agopledge(2), and the traditional OpenBSD privilege dropping model by which pledge(2) expands upon, is demonstrably the superior model by which developers can easily understand and use to design secure programs. Simple interfaces always beat more complicated ones.