Hacker News new | ask | show | jobs
by saagarjha 1067 days ago
What kind of mitigations would help here?
1 comments

SELinux/RSBAC/AppArmor/grsecurity and similar.
These largely require buy-in from applications just like pledge.
They absolutely don't, that's the key difference.

What makes you think otherwise?

You can’t just stick sandboxing around arbitrary apps without them breaking.
The technologies I listed are not sandboxing, as that term refers to a different category of technology.

And you're right, kind of; you need to set the permissions for apps, but that doesn't mean they need cooperation from the software developers. The whole point is that they don't. With those technologies you can lock down complex closed source programs, something not possible with pledge.

Those seem to be of the category of “I have a program and I want to restrict what it does” which seems like a sandbox to me. The problem here is that trying to figure out what goes on this list is difficult for arbitrary programs, even when you’re the one writing it. When you’re just applying it to third party software it’s very likely something will not function correctly.