Hacker News new | ask | show | jobs
by astrange 3616 days ago
Nope. There were some patches but it never made it in somehow.

I think it's worse there's no sandboxing. Ports just runs all kinds of code downloaded off the internet as root. Latest version does have the very beginnings of some in Capsicum but it's not like OS X where every daemon is syscall and FS sandboxed.