5 ms·
There is a package repository where many of the packages have been "pledged" and "unveiled", meaning that they execute with fewer unneeded privileges. And a ge
by lcall 4y ago
There is a package repository where many of the packages have been "pledged" and "unveiled", meaning that they execute with fewer unneeded privileges. And a general lack of privilege escalation exploits in base. And privilege separate by running things as distinct users. So jails might be less needed or less helpful by comparison, overall. There are chroot jails though, not sure why anyone would think they are not available in OBSD.