Hacker News new | past | comments | ask | show | jobs | submit login

In a way, just not in the traditional filesystem sense; e.g., jail, chroot.

Pledge allows a program to 'promise' which calls it is expected to make. For example, a program promising only to use 'stdio', will SIGABORT if you try to open a socket, fork, exec, or anything not part of the stdio group (as defined by pledge)

https://man.openbsd.org/pledge.2




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: