Theo de Raadt Presents OpenBSD's Pledge Security Mechanism
Hackfest Communication · Talk · YouTube title: Hackfest 2015: Theo de Raadt presented "Pledge: A new security technology in openbsd"
Why it's here
HN points to it as the canonical overview of pledge and the ideas behind OpenBSD's exploit mitigations.
What it covers
Theo de Raadt presents pledge, a new OpenBSD security mechanism that kills processes which exceed the system calls they declared they need. The talk was given late at night at Hackfest 2015.