OpenBSD's pledge(2) and unveil(2) are developer-friendly, study finds

OpenBSD's pledge(2) and unveil(2) are developer-friendly, study finds

Contributed by<br>Peter N. M. Hansteen<br>on 2026-07-07<br>from the pledge+unveil for much goodness dept.

Academic studies of OpenBSD's features and their practical impact on security are somewhat rare, but we were pleasantly surprised to see the recent paper A Measurement Study on the Adoption of Pledges and Unveils in the OpenBSD Operating System, by Jukka Ruohonen, Krzysztof Sierszecki, Abhishek Tiwari (all at University of Southern Denmark).

The paper studies the adoption of the pledge(2) and unveil(2) in the OpenBSD base system and packages over time, and finds that the features provided actually seem to facilitate adoption of secure coding practices.

The paper's abstracts concludes,

All in all, the measurement results indicate that the adoption of system call minimization and sandboxing techniques is not necessarily as troublesome as has often been discussed in the literature.

The full text of the paper is available too, as PDF, HTML, or TeX source, for your advocacy use and pleasure.

Reply

Latest Articles

Wed, Jul 0805:56<br>OpenBSD's pledge(2) and unveil(2) are developer-friendly, study finds<br>(0)

Mon, Jul 0619:01<br>OpenSSH 10.4/10.4p1 released!<br>(0)

Mon, Jun 2916:57<br>relayd(8) and httpd(8) TLS settings update.<br>(1)

Tue, Jun 2311:46<br>OpenBSD/amd64 kernel virtual address space is now 512GB<br>(2)

Fri, Jun 1208:02<br>syslogd(8) privileged and non-privileged parts now separate binaries<br>(0)

Fri, Jun 0506:41<br>Random relinking at boot comes to httpd(8) and smtpd(8)<br>(0)

Wed, Jun 0306:58<br>llvm/clang(1)/lld(1) updated to version 22.1.6<br>(0)

Wed, May 2705:56<br>LibreSSL 4.3.2 released<br>(0)

Sat, May 2311:51<br>Game of Trees 0.126 released<br>(0)

Credits

Copyright &copy;<br>2004-2008<br>Daniel Hartmeier.<br>All rights reserved.<br>Articles and comments are copyright their respective authors,<br>submission implies license to publish on this web site.<br>Contents of the archive prior to<br>April 2nd 2004 as well as images<br>and HTML templates were copied from the fabulous original<br>deadly.org with<br>Jose's and<br>Jim's kind permission.<br>This journal runs as CGI with<br>httpd(8)<br>on OpenBSD, the<br>source code is<br>BSD licensed.<br>undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]