notaplumber1

7 ms·

31.
by notaplumber1 4y ago
Not at all.
32.
by notaplumber1 4y ago
It's not the broadest permissions from the parent, but the promises at the time of the fork, for example you can setup the parent in such a way that you fork off early a unprivileged (or privileged) child that has a different set of pr
33.
by notaplumber1 4y ago
No, simply because using unveil is not mandatory. It's opt-in. The filesystem becomes "veiled" to the application only after the first call to unveil(), subsequent calls "unveil" files/directories until the fin
34.
by notaplumber1 4y ago
pledge(2)'s predecessor used bits, it was inflexible: https://flak.tedunangst.com/post/string-interfaces
35.
by notaplumber1 4y ago
The idea of a "pledge" utility isn't a novel one, it is my understanding that one was intentionally not provided.
36.
by notaplumber1 4y ago
> I'll definitely be doing more to make the C API as compatible with OpenBSD as possible. One suggestion I might add, it would be worth trying to compile any of OpenBSD's privilege separated network daemons on Linux (w/ Co
37.
by notaplumber1 4y ago
Hi jart, I noticed that you're missing the sendfd promise. Is there a reason for that omission? Also you've added a number of extensions that perhaps should be documented as such. Also there's a pretty significant undocumente
38.
OpenBSD/arm64 on Lenovo ThinkPad x13s(twitter.com)
5 points by notaplumber1 4y ago|0 comments
39.
by notaplumber1 4y ago
> While doing this I noticed my old rules referenced lo as the loopback IF, but it's clearly called lo0. You were using interface groups. The loopback interface, lo0 is a part of the lo interface group. https://man.openbs
40.
by notaplumber1 4y ago
What even is an "AI powered" camera? You mean a device that will become useless when your company goes out of business in a few years, or shifts focus, or that only ever works on specific versions of Windows/macOS due to some
41.
by notaplumber1 4y ago
> .. physically backed up in a Google Drive folder ... That's not what a physical backup means.