On Thu, Apr 26, 2018 at 04:01:43PM +0000, David CARLIER wrote: > Interesting, quick question out of curiosity, when the user configure the > pledge permissions, is there any "minimum permissions" handling in case or > it s all user responsibility to make it correct ?
It's here for debugging, not to provide knobs to users who love to push knobs, so very little handling of special cases is done. If you read the diff, you'll see that if your pledge promises list is invalid, pledge() will error out, tell you so on stdout, and continue. If you fuck it up and end up in a situation where the browser doesnt start at all, edit ~/.mozilla/firefox/*.default/prefs.js and remove the security.sandbox related lines so that it goes back to the defaults (which are installed in /usr/local/lib/firefox/browser/defaults/preferences/all-openbsd.js) Landry
