26 points mococa 2 hours ago 1 comments
jmclnx 31 minutes ago | parent
Interesting no mentioned about OpenBSD pledge(2), unveil(2). By far the easiest sandboxing out there. An example:
#ifdef OpenBSD
if(pledge("stdio rpath wpath cpath",NULL) == -1)
err(1,"pledge\n");
#endif
Very easy, all the other examples seem rather complex to me. unveil(2) is just as easy.