61–65 of 65 posts
Earlier quoted context omitted.
Yeah, sure, linux has Pledge. Bullshit.
Of course it does, seccomp, developed way before pledge :))
Pledge is instrinsic. You have it right from the beggining with C and Perl. And it's straightforward to use.
Earlier quoted context omitted.
It's generally easy to maintain on my server. With normally fewer than 40 processes/daemons running at any time, I can reason about what's going on, as opposed to Linux or macOS. Downsides are that much of the system feels stuck in ancient times (there seems to be more support and documentation for tape drives than SSDs), the ongoing removal of sometimes useful software like sqlite from base, and anemic or absent sup…
It's generally easy to maintain on my server. With normally fewer than 40 processes/daemons running at any time, I can reason about what's going on, as opposed to Linux or macOS. This really can't be emphasized enough. It's very simple to see what's running. Right now on my OpenBSD system, when I do ps ax |wc -l the answer is 51. But that's misleading. Because: nsd 5 processes ntpd 3 processes nfsd 5 processes Etc. S…
60
Windows 10 minus all the vivaldi (~chrome) processes. You can trim most OSes to the reasonable essentials if you try hard enough.
Earlier quoted context omitted.
I've run it in the past, but not recently. I'll see if something appears to me and try to post it here for you. And good luck with your NetBSD journey, with or without FDE. I've thoroughly enjoyed my years with it as my primary OS.
I'd start here - https://www.netbsd.org/docs/guide/en/chap-cgd.html and point your IRC client to #netbsd on irc.freenode.net.
Earlier quoted context omitted.
And where is seccomp used (by default)?
Chrome and Firefox both use seccomp by default on Linux.
edit: and this number does not even include the ports available with pledge support, among others chromium.. and the fact that they were capable of adding pledge support this quickly says a lot, imho, about the implementation differences between libseccomp and pledge.
Off topic a bit, but anyone here use OpenBSD? I'd be interested in hearing why you use it, and what your experience has been like.
I've used FreeBSD on my laptop (lenovo x201) for a long time, I've also installed OpenBSD from time to time. The rumors on the internet was that OpenBSD had better hardware support. I remember someone claiming that whereas FreeBSD developers use VMs to develop, OpenBSD devs used native machines (mostly laptops). I faintly remember that installing OpenBSD was harder than FreeBSD. FreeBSD came with a terminal graphical…