tmppath promise removed from pledge(2) in -current https://www.undeadly.org/cgi?action=article;sid=20260226164038 #openbsd #pledge #tmppath #development #programming #security #securesystems #freesoftware #libresoftware
tmppath promise removed from pledge(2) in -current https://www.undeadly.org/cgi?action=article;sid=20260226164038 #openbsd #pledge #tmppath #development #programming #security #securesystems #freesoftware #libresoftware
signify-rs 0.3.0 is released! The main code now runs sandboxed with #capsicum on #FreeBSD, #pledge/#unveil on #OpenBSD, and #landlock on #Linux. File opens are hardened with openat2 on Linux and O_NOFOLLOW on #unix. Resource limits are set for further hardening. Code fixed to create deterministic signatures, bit-exact with the reference implementation. Refer to the ChangeLog for more information: https://git.sr.ht/~alip/signify/tree/main/item/ChangeLog.md #rustlang #security
signify-rs 0.3.0 is released! The main code now runs sandboxed with #capsicum on #FreeBSD, #pledge/#unveil on #OpenBSD, and #landlock on #Linux. File opens are hardened with openat2 on Linux and O_NOFOLLOW on #unix. Resource limits are set for further hardening. Code fixed to create deterministic signatures, bit-exact with the reference implementation. Refer to the ChangeLog for more information: https://git.sr.ht/~alip/signify/tree/main/item/ChangeLog.md #rustlang #security