3 ms·

Isn’t pledge(2) trivially easy to escape anymore? This used to be one of the differences compared to eg capsicum(2).

• saagarjha 4y ago
  No, not really.
• anthk 4y ago
  pledge(2) aborts.
  • trasz2 4y ago
    And? How’s that relevant?
    • anthk 4y ago
      man 3p pledge, try escaping it with a simple Perl script.
      • trasz2 4y ago
        In other words you don't know what you're talking about, otherwise you would be able to answer a simple question.
• beachhead 4y ago
  is pledge easy to escape? can you give some examples?
  • trasz2 4y ago
    For a while you could just execute another binary, it would run without restrictions imposed on the (pledged) parent. This is a stark contrast to Capsicum, where the monotonicity (ie the fact that once you loose the permission to something you'll never ever get it back, unless being explicitly passed it again) is one of the fundamental assumption behind the design.