[Oisf-devel] OpenBSD pledge(2) and unveil(2)
Tamara B. Elizondo
mujqqj2demnsxs at gmail.com
Sat Nov 24 21:33:32 UTC 2018
I am looking for more information on Suricata's usage of isolation features of different operating systems, my current idea is to use OpenBSD so I am asking if Suricata uses pledge or unveil, but I am interested for resources or simply, a list of isolation features used by Suricata; in the case of Suricata not proceeding like so, what are your recommendations for isolation made by a system administrator? I am not talking about hardware VMs, that's the ultimate but resource intensive solution, more like either containers or other operating system tuning.
Thanks for the great project;
Patiently awaiting your advice.
More information about the Oisf-devel