3 ms·
How does this work for child processes? What if a service regularly starts new processes to accomplish various tasks over its lifetime. Would each process also
by teawrecks 4y ago
How does this work for child processes? What if a service regularly starts new processes to accomplish various tasks over its lifetime. Would each process also declare promises that have to be a subset of the parent? If the parent is compromised, could it then cause its children to ask for more permissions than it needs?
- freeone3000 4y agoExec can indeed cause an pledge escalation; the caller can cause it to inherit or have predetermined limits, but in practice this isn't used since the child would have to do similar setup tasks. As such, "exec" is a commonly pledged-out permission!