On Fri, Jan 31, 2020 at 10:47:17AM +0100, Patrick Kristiansen wrote:

[cut]

> 
> I would like to get more information about doing application programming
> for an OS like OpenBSD. I understand that if you program your
> applications in C, you have readily available pledge/unveil, etc. But
> many applications are written in higher-level languages, and in my case
> at least, it seems to be nearly impossible to write a secure application
> without changing to C or some other language that can easily use
> OpenBSD's system calls. And for a mediocre programmer, or just an
> inexperienced one, it exposes you to a whole host of other problems that
> can lead to worse security and quality.
>

Some "high-level" languages have support for some of the
OpenBSD-specific syscalls. For instance, golang has had native support
for pledge(2) and unveil(2) for a while now.

I don't know if the source is authoritative and I am not related to
the author in any way, but there is also a list of which languages
support those syscalls at:

  https://gist.github.com/ligurio/f6114bd1df371047dd80ea9b8a55c104

note that in some cases the support is available from third-parties
modules.

HTH

Reply via email to