14,307 karma · joined May 15, 2016
> Why trust a program to set its own capabilities?
An example may be that a program starts needing a wide range of capabilties but can then ratchet down to a reduced set once running, aka "privdrop".
> why isn't there a way to set capabilities from the parent process when execing?
There have been replies on other systems so just to stick with pledge which provides the abiliy to set "execpromises" to do this.
[1] https://man.openbsd.org/pledge
[2] https://www.openbsd.org/papers/eurobsdcon2017-pledge.pdf
[3] https://www.openbsd.org/papers/BeckPledgeUnveilBSDCan2018.pd...
I don't follow this. Just abort the rebase?
3 months ago - https://news.ycombinator.com/item?id=35738817
6 months ago - https://news.ycombinator.com/item?id=34625573
The paper can be found at the following link.
Q: Are you shipping Milan racks and if so what does the moving to Genoa entail for Oxide?
I’m not a particularly sentimental person but hearing the following from Shul has stuck with me and feels like an appropriate reminder for today.
> Life is short and it’s uncertain. It’s not one or the other it’s both. And because it is you can’t possibly miss the gift that each day is.