cosmopolitan/test
Justine Tunney e81edf7b04 Improve pledge() and unveil()
The pledge.com command now supports the new [WIP] unveil() support. For
example, to strongly sandbox our command for listing directories.

    o//tool/build/assimilate.com o//examples/ls.com
    pledge.com -v /etc -p 'stdio rpath' o//examples/ls.com /etc

This file system sandboxing is going to be perfect for us, because APE
binaries are self-contained static executables that really don't use the
filesystem that much. On the other hand, with non-static executables,
sandboxing is going to be more difficult. For example, here's how to
sandbox the `ls` command on the latest Alpine:

    pledge.com -v rx:/lib -v /usr/lib -v /etc -p 'stdio rpath exec' ls /etc

This change fixes the `execpromises` API with pledge().

This change also adds unix.unveil() to redbean.

Fixes #494
2022-07-18 07:58:20 -07:00
..
dsp ttyraster: reset ANSI attributes after each line (#469) 2022-07-09 01:38:35 -07:00
libc Improve pledge() and unveil() 2022-07-18 07:58:20 -07:00
net Add tcp syn packet fingerprinting to redbean 2022-07-17 02:43:49 -07:00
tool Limit pledge.com default virtual mem to total ram 2022-07-15 06:53:01 -07:00
test.mk Support malloc() on bare metal 2021-02-24 00:53:24 -08:00