Software Sandboxing: The Basics (2025)

1 comments

• jmclnx an hour ago

  Interesting no mentioned about OpenBSD pledge(2), unveil(2). By far the easiest sandboxing out there. An example:

      #ifdef OpenBSD
        if(pledge("stdio rpath wpath cpath",NULL) == -1)
          err(1,"pledge\n");
      #endif
  

  Very easy, all the other examples seem rather complex to me. unveil(2) is just as easy.