Pledge. Control what programs can do on Linux, the simple way.

github.com/jart/pledge

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

November 2023
  • Add basic support for AF_NETLINK socket type
April 2023
  • Refactored out more hardcoded non-symbolic constants from BPF code
  • Fix aarch64 issue
  • Remove magic numbers from BPF code
  • Cleanup some code
  • Added support for printing the instruction pointer architecture-indep…
  • Fix error reporting handler
  • Fixed Makefile accidentally pasting tons of dependencies on the comma…
  • Quick fixup to add progress on MonitorSigSys
  • Added support for shared object LD_PRELOAD injection
  • Clarify that proper DSO support is not implemented yet with a TODO
  • Went over most imported files and attempted to clean up things
  • Removed random useless target from Makefile
  • Merge branch 'master' of github.com:jart/pledge
  • Simplified a few of the imported cosmopolitan functions
  • Rename utility pledge.com -> pledge
  • Get build working on Alpine Linux 5.15
  • Make makefile compatible with Emacs tooling
  • Restructured source files to make them a lot more alike to cosmopolitan
  • Made a lot of syscall usage dependent on definitions being present