Theo de Raadt on pledge(2) at EuroBSDCon 2017

Theo de Raadt, the founder and leader of the OpenBSD project, gave a presentation “Hoisting: lessons learned integrating pledge into 500 programs“ during EuroBSDCon 2017 in Paris. Pledge is a system call invented in OpenBSD. Using it, the program promises to use only a specific subset of POSIX, described by a very small number of keywords that can easily be understood and remembered. If the program later attempts to use functionality it pledged that it would not use, the program gets killed by the operat