On Mon, May 21, 2018 7:42 am, Klemens Nanni wrote:
> On Mon, May 21, 2018 at 11:06:59AM +0200, Theo Buehler wrote:
>> As I told you before, I really wish we could stop using prot_exec in the
>> ports tree. In some huge ports it's unavoidable, but for a simple wm
>> it's overkill. See also:
>> https://marc.info/?l=openbsd-ports&m=144822758614817&w=2
>>
>> Remember the basic pledge idiom: setup -> pledge -> runtime
> Ah, hadn't seen that thread before.
>
Just doing my part as the cautionary tail. :)
Tim.
>> > + main(int argc, char *argv[])
>> > + {
>> > ++ if (pledge("stdio rpath unix dns proc exec prot_exec", NULL) == -1)
>> > ++ die("pledge\n");
