Artifacts Associated With Ticket a550bff2f89212af12be7cffdced2c8a59f5e75c
Ticket change [62f8f4bd0f] (rid 33733) by js on 2020-12-22 13:05:46:
- icomment:
`OFSandbox` currently maps more or less 1:1 to OpenBSD's `pledge() `and `unveil()`. While those are great APIs that are easy to adopt for applications, it's unclear whether the current `OFSandbox` could be adopted to other sandboxing frameworks like seccomp-bpf or Capsicum.
- login: "js"
- milestone initialized to: "none"
- mimetype: "text/x-markdown"
- priority initialized to: "Medium"
- severity initialized to: "Important"
- status initialized to: "Open"
- title initialized to: "Generalize API for OFSandbox"
- type initialized to: "Enhancement"
- icomment:
Ticket change [f6a083f883] (rid 33746) by js on 2020-12-22 13:18:13:
- icomment:
`OFSandbox` is private in 1.0 for now ([](510628432f)) until this gets solved.
- login: "js"
- mimetype: "text/x-markdown"
- resolution changed to: "Open"
- icomment:
Ticket change [af9f9c5d74] (rid 37384) by js on 2021-10-24 10:48:29:
- icomment:
Landlock landed in Linux 5.13, which works similarly to pledge() / unveil(). Implementing OFSandbox with Landlock will probably be a good sanity check on whether the API is generic enough.
- login: "js"
- mimetype: "text/x-markdown"
- icomment:
Ticket change [6905e7164a] (rid 47632) by js on 2024-05-22 00:15:44:
- login: "js"
- milestone changed to: ""
- mimetype: "text/x-markdown"