2026-09-27 01:12 UTC
Is isolation in #OpenBSD with chroot + privsep + pledge/unveil as simple to do as it is in #FreeBSD Jails? How do you do it when you need to use the feature?
#openbsd #bsd #jail #chroot #privsep #pledge #unveil
Replies (2)
-
@dexter@bsd.network 2026-09-27 07:07
@lobocode@hachyderm.io I don’t want to talk about it. #SysJail
-
@bpl@snac.bsd.cafe 2026-09-27 07:18
Those things are not comparable, at least in terms of usage simplicity. Pledge/unveil needs to be baked in into the application code. The most similar thing on OpenBSD is vmd.