Hacker News new | ask | show | jobs
by masklinn 2539 days ago
This discussion is basically inventing a per-library pledge(2).
1 comments

or apparmor, selinux, grsec, tomoyo, ... But those systems can't integrate into scripting language per-library use case without some serious thread / IPC overhead.
These others can achieve what's intended, but the entire flavour of the discussion is a dead ringer for pledge's purpose and interface, which is much simpler and very much internal to the software (a self-check of sorts).