Hi tech@
Now that settime is available in pledge(6) then date(1) can pledge
earlier, and afterwards drop the settime privilege (this is already in):
Index: date.c
===================================================================
RCS file: /cvs/src/bin/date/date.c,v
retrieving revision 1.49
diff -u -p -u -r1.49 date.c
--- date.c 9 Oct 2015 01:37:06 -0000 1.49
+++ date.c 24 Oct 2015 17:50:58 -0000
@@ -66,6 +66,9 @@ main(int argc, char *argv[])
setlocale(LC_ALL, "");
+ if (pledge("stdio rpath wpath settime", NULL) == -1)
+ err(1, "pledge");
+
tz.tz_dsttime = tz.tz_minuteswest = 0;
rflag = 0;
while ((ch = getopt(argc, argv, "ad:jr:ut:z:")) != -1)
Best regards,
Ricardo Mestre
