Pledge and firefox

It is still early days but seems like a very neat and easy to
use solution on systems that support it and Theo mentions in his
talk that part of it is designed for firefox. Is mozilla aware of
pledge which allows programmers to write programs to pledge to an OS
kernel that limited functionality is required in processes from a
routine onwards and so drop abilities at any stage and multiple stages
of a programs execution and have different abilities allowed
(sandboxed) for different children.

It is primarily designed for the OpenBSD kernel but he states in the
following talk that he/they would be flexible during the early
development to cater for making it easier to port to something like
seccomp and so Linux. 

https://www.youtube.com/watch?v=F_7S1eqKsFk
http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man2/pledge.2?query=pledge
http://www.openbsd.org/papers/hackfest2015-pledge/index.html



-- 

KISSIS - Keep It Simple So It's Securable