OpenBSD's pledge is intentionally designed to be simple and easy to add to projects. It's still more granular than I expected: there are several different network permissions, and even a separate permission for tape drives!
miniblog.
Related Posts
14
One subtle behaviour of Claude that wasn't obvious to me: whilst each conversation is transient, permissions persist across conversations.
So if you've given permission to run e.g. 'cargo test' or even 'cargo run', you need to be sure that all future invocations are safe too.
You can see the current permissions with /permissions.
I've release difftastic 0.56! In this release:
* Added support for Scheme and Smali
* Improved JS, TypeScript, QML and Perl parsers
* File permission changes are now reported
GitHub is adding more permission levels! You can now give people the power to close issues without giving commit rights: https://github.blog/changelog/2019-05-23-triage-and-maintain-roles-beta/