3 commits

Author	SHA1	Message	Date
Justine Tunney	47b3274665	Make improvements ... - Add rusage to redbean Lua API - Add more redbean documentation - Add pledge() to redbean Lua API - Polyfill OpenBSD pledge() for Linux - Increase PATH_MAX limit to 1024 characters - Untrack sibling processes after fork() on Windows	2022-04-28 09:57:07 -07:00
Justine Tunney	9d61e23c80	Make more fixes and improvements ... This change attempts to fix some report build issues. It also builds upon development work described in previous changes.	2022-04-21 09:18:45 -07:00
Justine Tunney	5a132f9652	Add seccomp bpf sandboxing to redbean ... It's now possible to pass the `-S` or `-SS` flags to sandbox redbean worker proecsses after they've been forked. The first `-S` flag is intended to be a permissive builtin policy that limits system calls to only that which the various parts of redbean serving need. The second `-SS` flag is intended to be more restrictive, preventing things like the Lua extensions you download off the web from using the HTTP client or sockets APIs. In upcoming changes you'll be able to implement your own Berkeley Packet Filter sandbox programs and load them via Lua.	2022-04-18 08:54:42 -07:00