4 ms·
This statement conflicts with other statements here -- is this actually true? It sounds like a security hole.
by KerrAvon 4y ago
This statement conflicts with other statements here -- is this actually true? It sounds like a security hole.
- legalcorrection 4y agoWhy not just pledge not to exec?
- ben_bai 4y agoif you have exec permission (pledge "exec") you can exec another program and it starts with a clean slate. It's about dropping privileges so it's assumed you know what your doing and in the best case scenario the executed binary will pledge itself. Pledge is not some external security feature but something that every program itself manages.
- loeg 4y agoFork and exec are different operations.