diff options
| author |   deraadt <deraadt@openbsd.org> | 2015-10-12 23:32:55 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 2015-10-12 23:32:55 +0000 |
| commit | bffaeb0c372ca5fa5abd84dc3e7dd955ef2aa854 (patch) | |
| tree | a41d994b9e2b866c3bd55c4bb78619378bafa236 /lib/libc/sys | |
| parent | pledge "proc" request should allow setsid() (diff) | |
| download | wireguard-openbsd-bffaeb0c372ca5fa5abd84dc3e7dd955ef2aa854.tar.xz wireguard-openbsd-bffaeb0c372ca5fa5abd84dc3e7dd955ef2aa854.zip | |
satisfy jmc!
Diffstat (limited to 'lib/libc/sys')
| -rw-r--r-- | lib/libc/sys/pledge.2 | 11 |
1 files changed, 5 insertions, 6 deletions
diff --git a/lib/libc/sys/pledge.2 b/lib/libc/sys/pledge.2 index db9ef96cd27..bb716a87aac 100644 --- a/lib/libc/sys/pledge.2 +++ b/lib/libc/sys/pledge.2 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pledge.2,v 1.4 2015/10/12 21:40:38 deraadt Exp $ +.\" $OpenBSD: pledge.2,v 1.5 2015/10/12 23:32:55 deraadt Exp $ .\" .\" Copyright (c) 2015 Nicholas Marriott <nicm@openbsd.org> .\" @@ -433,11 +433,10 @@ Allows a process to call .Xr execve 2 . Coupled with the .Va "proc" -request, this allows a process to fork and execute another program; -that new environment will become un-pledged. -Hopefully this new program uses -.Xr pledge 2 -soon to reinstantiate the rules it promises to follow. +request, this allows a process to fork and execute another program. +The new program starts running without pledge active and hopefully +makes a new +.Xr pledge 2 . .It Va "prot_exec" Allows the use of .Dv PROT_EXEC |