2 ms·
Pledge and Unveil are better in one, maybe two respects. 1) The restrictions are put in place by the developer, who understand the correct and expected behavio
by mrweasel 4y ago
Pledge and Unveil are better in one, maybe two respects.
1) The restrictions are put in place by the developer, who understand the correct and expected behaviour better than a random systems administrator.
2) Neither Pledge nor Unveil can be disabled by the user. Both SELinux and AppArmor (I don't know RSBAC) can be disabled, and is FREQUENTLY disabled because dealing with either systems are a major hassle to configure.
I'm not quite sure how SELinux is better, it's perhaps more granular, but is that better?