Hacker News new | past | comments | ask | show | jobs | submit login

The OpenBSD approach isn't even in the same league. Not only it is developer opt-in, but it is also limited to enforcing or restricting syscalls, that's it. If you have a root RCE in say sshd, pledge won't help you. SELinux will.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: