Contributed by rueda on from the keep-it-clean dept.
Kristaps Dzonsons
(known for
mandoc(1),
rpki-client(8),
and much more)
has written an article,
Source code sandboxing,
on sandboxing
from the perspective of developers.
It compares the facilities available under several
operating systems, and requests relevant
contributions.
As Undeadly readers might expect, OpenBSD's
pledge(2)
and
unveil(2)
receive favourable appraisal.
Kristaps' article refers to Sandboxing Adoption in Open Source Ecosystems, an academic article published on the subject.
[In 2016, Undeadly published Kristaps Dzonsons on pledge(2).]