pledge (OpenBSD command and syscall implementation for Linux)
pledge is a port of OpenBSD's syscall to Linux by Justine Tunney.
This script builds a shared library (to be injected via LD_PRELOAD)
and a command line utility to restrict program execution privileges
and limit parameters such as maximum niceness, cpu time, virtual
memory, file descriptors, child processes, and individual file sizes.
For more info, see: https://justine.lol/pledge/
https://github.com/jart/pledge
NOTES:
* pledge doesn't support 32-bit x86
* pledge help is available via the -h option
* to run pledge at glibc executable load time:
strace -vff bash -c \
'_PLEDGE=4194303,0 LD_PRELOAD=/usr/lib64/pledge/sandbox.so ls'
Maintained by: B. Watson
Keywords: pledge,jart,Justine,Tunney,OpenBSD,SECCOMP,sandbox
ChangeLog: pledge
Homepage:
https://justine.lol/pledge/
Download SlackBuild:
pledge.tar.gz
pledge.tar.gz.asc (FAQ)
(the SlackBuild does not include the source)
Individual Files: |
README |
pledge.SlackBuild |
pledge.info |
slack-desc |
© 2006-2024 SlackBuilds.org Project. All rights reserved.
Slackware® is a registered trademark of
Patrick Volkerding
Linux® is a registered trademark of
Linus Torvalds