This article dives into how OpenBSD's pledge() and Linux's seccomp() system calls implement self-imposed sandboxes to limit program access to system resources. The article compares the ease of use and flexibility of pledge() in OpenBSD versus the precision of seccomp() in Linux.
mateo-rfz•5h ago