Linux seccomp(2) vs OpenBSD pledge(2)
Posted on Tue 24 October 2017 in Events
A comparison of two system call restriction mechanisms: Linux's seccomp(2)
and OpenBSD's pledge(2). Covers how each is designed, how they're used in
practice to reduce a process's attack surface, and where their design
philosophies diverge.
Presented at Open Source Summit Europe 2017, Prague.