Re: [patch] default promises for unprivileged processes

2019-06-15 Thread Bryan Steele
On Sat, Jun 15, 2019 at 04:05:14PM +0200, Srikant T wrote: > + /* XXX cludge to let Xorg function */ > + if (35 == p->p_ucred->cr_uid) > + return; This is completely unacceptable. Kludge is spelled with a K. > --- > END. > >

Re: [patch] default promises for unprivileged processes

2019-06-15 Thread Theo de Raadt
Your diff isn't a change to pledge -- it is completely tearing up the POSIX rulebook for all programs. I am not interested in the way it goes.

[patch] default promises for unprivileged processes

2019-06-15 Thread Srikant T
Hi, Sharing my patch in case someone finds it useful. Didn't have much to offer besides donations and CD purchases all these years. Tested on amd64 6.5-stable (Changes are not arch-dependent) : base + Xorg + vmd + ntpd + sshd + chromium : work fine Patch is against current src tree as on 2019-