diff options
| author |   deraadt <deraadt@openbsd.org> | 2015-10-23 01:10:01 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 2015-10-23 01:10:01 +0000 |
| commit | dfa9d6788792af78bc6b4b0c3f72ae0304fb2fa6 (patch) | |
| tree | 611b5fbc10f6137d1080b856752adf6f9f62ad62 /lib/libc | |
| parent | remove the pointer from hfsc_class structs back to hfsc_if. (diff) | |
| download | wireguard-openbsd-dfa9d6788792af78bc6b4b0c3f72ae0304fb2fa6.tar.xz wireguard-openbsd-dfa9d6788792af78bc6b4b0c3f72ae0304fb2fa6.zip | |
Add 3 new pledge requests. "ps" exposes enough sysctl information for
ps-style programs (there are quite a few in the tree, including tmux).
"vminfo" exposes a bit more system operation information, which many
observation programs want (such as top). settime allows setting the system
time, and will be used to pledge-protect the last ntpd process.
Diffstat (limited to 'lib/libc')
| -rw-r--r-- | lib/libc/sys/pledge.2 | 26 |
1 files changed, 24 insertions, 2 deletions
diff --git a/lib/libc/sys/pledge.2 b/lib/libc/sys/pledge.2 index b41e034884a..90505f6020e 100644 --- a/lib/libc/sys/pledge.2 +++ b/lib/libc/sys/pledge.2 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pledge.2,v 1.8 2015/10/22 09:23:41 deraadt Exp $ +.\" $OpenBSD: pledge.2,v 1.9 2015/10/23 01:10:01 deraadt Exp $ .\" .\" Copyright (c) 2015 Nicholas Marriott <nicm@openbsd.org> .\" @@ -14,7 +14,7 @@ .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. .\" -.Dd $Mdocdate: October 22 2015 $ +.Dd $Mdocdate: October 23 2015 $ .Dt PLEDGE 2 .Os .Sh NAME @@ -455,6 +455,28 @@ with .Xr mmap 2 and .Xr mprotect 2 . +.It Va "settime" +Allows the setting of system time, via the +.Xr settimeofday 2 , +.Xr adjtime 2 , +and +.Xr adjfreq 2 +system calls. +.It Va "ps" +Allows enough +.Xr sysctl 2 +interfaces to allow inspection of processes operating on the system using +programs like +.Xr ps 1 . +Allows the following system calls: +.It Va "vminfo" +Allows enough +.Xr sysctl 2 +interfaces to allow inspection of the system's virtual memory by +programs like +.Xr top 1 , +and +.Xr vmstat 8 . .It Va "id" Allows the following system calls: .Pp |