;fill-opacity:1'/%3e%3cpath%20fill='%23000'%20fill-rule='evenodd'%20d='M7.249%203.2c.469%200%20.85.38.85.85v3.893l1.873%201.874a.849.849%200%201%201-1.2%201.2L6.896%209.145A1.7%201.7%200%200%201%206.4%207.943V4.049c0-.469.38-.85.849-.85'%20clip-rule='evenodd'%20style='fill:%23000;fill-opacity:1'/%3e%3c/svg%3e)
;fill-opacity:1'/%3e%3c/svg%3e)
An overview of OpenBSD's security features, including pledge() and unveil() APIs, and their implementation in Firefox's multi-process architecture for enhanced sandboxing.
OpenBSD Security Features and Sandboxing Mechanisms
Loading comments...
An overview of OpenBSD's security features, including pledge() and unveil() APIs, and their implementation in Firefox's multi-process architecture for enhanced sandboxing.
;fill-opacity:1'/%3e%3cpath%20fill='%23fff'%20d='M30.21%2019.84A15.2%2015.2%200%200%200%2038.334%2028H30.21zM58.095%2028H49.97a15.2%2015.2%200%200%200%208.125-8.16zM38.335%200a15.2%2015.2%200%200%200-8.126%208.158V0zm19.76%208.158A15.2%2015.2%200%200%200%2049.97%200h8.125z'%20style='fill:%23fff;fill-opacity:1'/%3e%3c/svg%3e){kind=small}
![[2022] Evaluating Thompson's Backdoor in OpenBSD's Make](data:image/svg+xml;base64,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)
![[2022] Evaluating Thompson's Backdoor in OpenBSD's Make](https://static.tom3.com/lazy-static/thumbnails/35abb033-2bc0-4961-9aab-9dcb33886948.jpg?preview=b570de69-1f6d-4180-bf8a-1d140a65a94d)
![[2019] Game of Tree - Stefan Sperling](https://static.tom3.com/lazy-static/thumbnails/f7d22dc7-78ad-4045-98af-4ac4b5154874.jpg?preview=7a6c7a2a-97ab-4995-adce-ae22b55d5777)
![[2023] Closing Session](https://static.tom3.com/lazy-static/thumbnails/477bec62-4475-4d69-bf4a-cd5de4b65c32.jpg?preview=125d8309-5b55-433f-a7e2-6d38993c990f)
![[2024] Confidential Computing with OpenBSD](https://static.tom3.com/lazy-static/thumbnails/38af8ebb-ba5d-416b-8cea-ede25a53ca80.jpg?preview=2dd443ec-f00c-42bc-9d38-7ce7b0e9e416)
![[2023] Using OpenBSD relayd as an Application Layer Gateway](https://static.tom3.com/lazy-static/thumbnails/c9ab2ece-7829-44d3-ba7d-24b2c607bc09.jpg?preview=f37f2de1-123e-4834-a784-6421e71cd185)
