3 ms·

tame(2) seems really ad-hoc. Also, isn't the path checking, like strncmp(path, "/tmp/", 5) == 0) { trivially bypassable with a something like /tmp/../usr/b

tame(2) seems really ad-hoc. Also, isn't the path checking, like strncmp(path, "/tmp/", 5) == 0) { trivially bypassable with a something like /tmp/../usr/bin ?