=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/72.html,v retrieving revision 1.30 retrieving revision 1.31 diff -c -r1.30 -r1.31 *** www/72.html 2022/10/01 21:23:40 1.30 --- www/72.html 2022/10/01 21:36:27 1.31 *************** *** 515,521 ****
  • Implemented privilege separation in xlock(1).
  • The TZ environment variable no longer supports absolute paths, ! to fit better fit into the pledge(2) bypass model.
  • AF_UNIX socket bind(2) and Implemented privilege separation in xlock(1).
  • The TZ environment variable no longer supports absolute paths, ! to fit better into the pledge(2) bypass model.
  • AF_UNIX socket bind(2) and ypconnect(2) system call creates a socket based upon the IP address encoded directly in a locked ypbinding file, thereby removing a horrible hack to support YP ! lookups in programs using strong a pledge(2) rules.
  • Restrict pledge("vminfo") callers to read-only swapctl(2) operations. --- 525,531 ---- href="https://man.openbsd.org/ypconnect.2">ypconnect(2) system call creates a socket based upon the IP address encoded directly in a locked ypbinding file, thereby removing a horrible hack to support YP ! lookups in programs using strong pledge(2) rules.
  • Restrict pledge("vminfo") callers to read-only swapctl(2) operations.