Awesome
awesome-pledge
A collaborative curated list of amazingly awesome OpenBSD pledge(2) resources and other awesome things.
Table of Contents
Documentation
- OpenBSD pledge(2) manpage
- pledge() - a new mitigation mechanism: slides from Theo de Raadt's presentation in Hackfest 2015 introducing pledge(2)
- Pledge: A new security technology in OpenBSD: video of the presentation
- why pledge(2) - or, how I learned to love web application sandboxing
- pledge-ex - examples of using pledge(2) in go/c/and Haskell)
Libraries
- autopledge-insert C - Automatically inserts pledge(2) calls into C/C++ code
- pledge.cr Crystal - Adds pledge(2) to crystal
- ksql C - wrapper for SQLite that adds pledge(2) sandboxing
- prx Erlang - an Erlang library for interacting with Unix processes
- extrasys Go - Extra system calls for Go not provided by the syscall package
- hs-pledge Haskell
- Openbsduser-haskell Haskell
- pledge Java
- node-pledge Javascript
- lua-openbsd Lua - Lua library that binds to OpenBSD specific functions
- pledge.nim Nim
- OpenBSD-Pledge(http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/gnu/usr.bin/perl/cpan/OpenBSD-Pledge/) Perl
- Unix-Pledge Perl
- php-pledge PHP 7.x+ (unveil calls too)
- py-openbsd-pledge Python
- openbsd-pledge Ruby
- openshim Go
- ruby-pledge Ruby
- pledge-rs Rust
- rusty-sandbox Rust - A crossplatform sandboxing library
- Pastebin-rust-pledge Rust - (pastebin code)
- clicken-pledge Scheme Chicken Scheme
- pledge.cs .Net
Credits
- Ligurio's Support of OpenBSD pledge(2) in programming languages Gist
- Calvin's Support of OpenBSD pledge(2) in programming languages thread on lobste.rs
License
This work is licensed under a Creative Commons Attribution 4.0 International License.