the stream

tedu: OpenBSD pledge doesn't work well on preexisting code

Alexander Bochmann Monday 22 of May, 2017
...he has staged a little exercise with ffmpeg to illustrate that, quite a fun read.

Also, I learned a new thing:

tedu wrote:
To find out more, we turn to ktrace’s little cousin, ltrace. It works almost exactly like ktrace (the output is even viewed with kdump), but it traces ld.so, the dynamic linker, instead of system calls.

Didn't know about ltrace up to now.