Re: https://reviews.freebsd.org/D57255 - migrating cut and rev

Adrian Chadd <[email protected]> wrote:

> to see more base utilities sandboxed but if it's going to involve
> fork/exec'ing another service
> for /each invocation of a binary/ rather than simply limiting the
> capabilities of the current
> process, it .. just feels too heavy weight.

Definitely. "cut" is often used for short-lived operations, often in
loops etc.

It would be a huge problem having another fork/exec in there.

Can capsium be made optional at run time? Like being enabled with "-C" etc.?

Cheers, Jamie