Sandboxing on Linux is powerful but painful.
Tools like seccomp and landlock are complex and hard to adopt compared to OpenBSD’s pledge or
FreeBSD’s capsicum, which are much simpler and better documented.
Simplicity wins.
#unix #linux #infosec
npub177…teh9a
2025-06-12 00:53:38 UTC
in reply to nevent1q…4a4p
Author Public Key
npub1773c2kdhaf88lk6nntdudn2p74egzurcs528cnmltl6vmshltu2q0teh9aSeen on
wss://relay.momostr.pinkPublished at
2025-06-12 00:53:38 UTCEvent JSON
{
"id": "601f5fde57e59acd6d8e8770d6ffbddbb6aaa9d7496f1b8b1a4f85fcf7a18242",
"pubkey": "f7a38559b7ea4e7fdb539adbc6cd41f57281707885147c4f7f5ff4cdc2ff5f14",
"created_at": 1749689618,
"kind": 1,
"tags": [
[
"t",
"infosec"
],
[
"p",
"fa3449c7f5b70d81f88d1406a8b6153380cf09f1433e52a4e1290660d49271d6"
],
[
"t",
"linux"
],
[
"proxy",
"https://snac.bsd.cafe/r1w1s1/p/1749689618.551833",
"web"
],
[
"e",
"a564d8a422c4ad8cea1d29a6478fcb8ebe70232a941b97002deeb89b305c104f",
"",
"root",
"fa3449c7f5b70d81f88d1406a8b6153380cf09f1433e52a4e1290660d49271d6"
],
[
"t",
"unix"
],
[
"proxy",
"https://snac.bsd.cafe/r1w1s1/p/1749689618.551833",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://snac.bsd.cafe/r1w1s1/p/1749689618.551833",
"pink.momostr"
],
[
"-"
]
],
"content": "Sandboxing on Linux is powerful but painful.\nTools like seccomp and landlock are complex and hard to adopt compared to OpenBSD’s pledge or\nFreeBSD’s capsicum, which are much simpler and better documented.\n\nSimplicity wins.\n\n#unix #linux #infosec",
"sig": "61e2d254e119574e346f84e3e6a5025485a6f618fb8327a0fbf7226ad13f105bf8f89c98da3b3293746105a3f8fb24a34f09e7a5a837f5da57f43d9e9d844299"
}