2 ms·
OpenBSD-current users are not only NOT affected by this, actually they just got Pledge and Unveil support in Firefox 71. https://marc.info/?l=openbsd-ports-cvs
by ArcVRArthur 7y ago
OpenBSD-current users are not only NOT affected by this, actually they just got Pledge and Unveil support in Firefox 71.
https://marc.info/?l=openbsd-ports-cvs&m=157539245010077&w=2 https://marc.info/?l=openbsd-ports-cvs&m=157539245010077&w=2
If you don't know about Pledge and Unveil you can think of it as similar to Firejail sandboxing from Linux but on steroids. It dynamically limits the types of kernel calls and filesystem addresses a process can make use of so if a rogue thread causes a process to perform an illegal operation under the Pledge rules OpenBSD will kill the process with SIGTERM. Whats more Pledge and Unveil allow the process to execute whatever calls are needed when the program initializes itself but it will relinquish the privilege to run those calls for the remainder of the program's runtime once it no longer needs them (after init).