Hacker News new | ask | show | jobs
by papercrane 12 days ago
> I'd love to see pledge/unveil on (upstream) Linux - but I'm not holding my breath

There is Landlock now, I believe it would be possible to implement unveil and pledge on top of that.
2 comments
e12e 12 days ago
Apparently someone tried wrapping landlock in unveil:

https://clehaxze.tw/gemlog/2022/04-02-landlock-unveil-experi...

https://github.com/marty1885/landlock-unveil

link
e12e 12 days ago
... And looks like cosmopolitan libc wraps landlock for unveil, in addition to implement pledge.
link
isityettime 12 days ago
One of HN's favorite hackers has done that: https://justine.lol/pledge/

There was a discussion here about it a few years ago: https://news.ycombinator.com/item?id=32096801

link
maleldil 11 days ago
> favorite

Interesting choice of word

link
isityettime 11 days ago
She's excellent and her stuff has made it to the front page many times. I love seeing her work come up and I imagine many others here feel the same way.
link
maleldil 11 days ago
If you're someone who can separate the work from the author, sure. She's a very intelligent person. Many of us can't.
link
isityettime 11 days ago
Fair enough. I didn't know what was supposed to be objectionable about her personally until your last comment made me do some Googling. Bleh.

To be honest, I feel like I still don't really know much about who she really is or what real political work she's doing recently, if any. And I kinda don't wanna know anyway; I don't wanna play political blacklist enforcer.

But I understand your reaction now. :-\

link