Hacker News new | past | comments | ask | show | jobs | submit login

I don't think Linux will get pledge() for a long time, and this definitely won't do it in the general case either.

More specific critique of seccomp here: https://blog.habets.se/2022/03/seccomp-unsafe-at-any-speed.h...




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: