Re: https://reviews.freebsd.org/D57255 - migrating cut and rev
Ed Maste <[email protected]> Thu, 11 Jun 2026 14:04:17 -0400
| Newsgroups | gmane.os.freebsd.architechture |
|---|---|
| Message-ID | <CAPyFy2BvdY8nkgfmncLw7jNtggjC-6vGKzE-NE84otOKesfN+g@mail.gmail.com> |
On Fri, 5 Jun 2026 at 10:46, Adrian Chadd <[email protected]> wrote: > > I'd rather not add command line options / environment settings that can disable > sandboxing. These should be cheap operations. Yeah, we don't really want to have this be a command-line option. The performance issue is really just a consequence of process-based privilege separation. We could enter capability mode when processing the last (or only) file specified on the command line (or stdio), giving us the benefit of sandboxing for a large fraction of uses of these tools without incurring much overhead.