"Extreme sandboxing"
"Extreme sandboxing"
Posted Nov 5, 2007 17:22 UTC (Mon) by i3839 (guest, #31386)In reply to: "Extreme sandboxing" by charlieb
Parent article: Daniel Bernstein: ten years of qmail security
Linux has seccomp, which a process can enabled via prctl(), but hardly anyone knows about it. Perhaps it's too secure, as it only enables read/write/exit/sigreturn, and disallows everything else.