Bob Beck: Adventures in OpenBSD pledge - BSDCan 2018
Channel: BSDCan
Date: 2018-08-02

A technical discussion of OpenBSD pledge(2), including recent/forthcoming changes.

OpenBSD has been integrating pledge(2) into a large portion of the OpenBSD base system.

Pledge has not been static however, and has some aspects that are continuing to evolve. in this talk we will review pledge briefly for the uninitiated, and why it exists, as well as discussing where and how pledge has been used in OpenBSD to date.

We will discuss how programs are adapted for use with pledge. and examine recent/forthcoming additions of exec/execpromises and pledgepath and how they are used to make programs more secure.

http://www.bsdcan.org/2018/schedule/events/968.en.html