3 ms·
This is on a different level than pledge. pledge applies to the whole process. This sandboxing, as far as I understand, would restrict syscall access to individ
by majewsky 5y ago
This is on a different level than pledge. pledge applies to the whole process. This sandboxing, as far as I understand, would restrict syscall access to individual functions and modules inside a process.
- Chris2048 5y agoCan pledge apply to child/sub-processes only?