4 ms·
if linux had openbsd's pledge(2) then you could disable filesystem writes, which you don't need for grepping. I know linux probably has orher mechanisms to achi
by jackhalford 6y ago
if linux had openbsd's pledge(2) then you could disable filesystem writes, which you don't need for grepping.
I know linux probably has orher mechanisms to achieve the same result but in this situation pledge seems natural.
- dan-robertson 6y agoProbably that’s right. But note that sort, for example, may need to write to (temporary) files. So disabling writes entirely is probably not a sufficient solution
- 10000truths 6y agoYou can achieve the same thing in Linux with seccomp.