newlispfanclub.alh.net

Posted: **Wed Oct 07, 2020 3:11 pm**

On OpenBSD pledge() system call forces the current process into a restricted-service operating mode.

I know newLISP can import function from shared libraries, but I have never done so yet. So I thought I'd give it a try with pledge():

Code: Select all

> (import "/usr/lib/libc.so.96.0" "pledge")
pledge@F99015DECD0
> (pledge "tty stdio" 0)
0
> (println "yay!")
yay!
"yay!"
> (! "ls -al")
Abort trap (core dumped)

In another window I see

Code: Select all

newlisp[56936]: pledge "proc", syscall 66

That was fun! I will play more with this little tool.

Posted: **Thu Oct 08, 2020 1:56 am**

Nice! 👍

Posted: **Thu Oct 08, 2020 8:06 am**

I was thinking of creating something that would allow running untrusted newLISP code (think serverless, function-as-a-service et c) as a CGI, only allowing to act on submittes post data and do calculations and spit out the result.

Now, with pledge() and newLISP running in a chroot already, the idea may some day come true.

newlispfanclub.alh.net

fun with pledge()

fun with pledge()

Re: fun with pledge()

Re: fun with pledge()