www/59.html - diff

Return to 59.html CVS log

Up to [local] / www

Diff for /www/59.html between version 1.59 and 1.60

version 1.59, 2016/03/06 10:50:10

version 1.60, 2016/03/06 11:19:49

Line 170

<ul>

support for HOSTALIASES</a>

in the

resolver</a>.

Line 184

<li>handling of

ed-style diffs</a> via proc/exec in

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch">patch(1)</a>.

patch(1)</a>.

</ul>

<li>Userland programs were audited so that they could be properly annotated

with pledge(2).

This resulted in design changes such as in

This resulted in design changes such as

<ul>

rdate(1)</a>,

<li>

addition of

sndiod(8)</a>

or the introduction of the <tt>SOCK_DNS</tt>

privilege separation</a> to

socket(2)</a>

rdate(1)</a>,

flag that makes an <tt>SS_DNS</tt> tagged socket conceptually different

<li>

from a plain socket.

addition of

privilege separation</a> to

sndiod(8)</a>,

<li>or the introduction of the <tt>SOCK_DNS</tt>

socket(2)</a>

flag that makes an <tt>SS_DNS</tt> tagged socket conceptually different

from a plain socket.

</ul>

<li>pledge(2) is also used to constrain programs that handle untrusted data

to a very limited subset of POSIX.

For example,

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strings">strings(1)</a>

strings(1)</a>

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=objdump">objdump(1)</a>

objdump(1)</a>

from the

binutils</a>

or the RSA-privsep process in

or the

smtpd(1)</a>.

RSA-privsep process</a> in

smtpd(8)</a>.

</ul>

<p>