Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
philsnow
on July 19, 2015
|
parent
|
context
|
favorite
| on:
A subsystem to restrict programs into a “reduced f...
Ah yeah, just found that, the patch has a couple lines added to sys/proc.h,
+ u_int ps_tame; +
, right before the end of what's defined as `ps_endcopy`, which is copied from parent to child in `process_initialize`.
Makes sense now.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
Makes sense now.