Return to 72.html CVS log | Up to [local] / www |
version 1.30, 2022/10/01 21:23:40 | version 1.31, 2022/10/01 21:36:27 | ||
---|---|---|---|
|
|
||
<li>Implemented privilege separation in <a | <li>Implemented privilege separation in <a | ||
href="https://man.openbsd.org/xlock.1">xlock(1)</a>. | href="https://man.openbsd.org/xlock.1">xlock(1)</a>. | ||
<li>The TZ environment variable no longer supports absolute paths, | <li>The TZ environment variable no longer supports absolute paths, | ||
to fit better fit into the <a | to fit better into the <a | ||
href="https://man.openbsd.org/pledge.2">pledge(2)</a> bypass model. | href="https://man.openbsd.org/pledge.2">pledge(2)</a> bypass model. | ||
<li>AF_UNIX socket <a | <li>AF_UNIX socket <a | ||
href="https://man.openbsd.org/bind.2">bind(2)</a> and <a | href="https://man.openbsd.org/bind.2">bind(2)</a> and <a | ||
|
|
||
href="https://man.openbsd.org/ypconnect.2">ypconnect(2)</a> system | href="https://man.openbsd.org/ypconnect.2">ypconnect(2)</a> system | ||
call creates a socket based upon the IP address encoded directly in a | call creates a socket based upon the IP address encoded directly in a | ||
locked ypbinding file, thereby removing a horrible hack to support YP | locked ypbinding file, thereby removing a horrible hack to support YP | ||
lookups in programs using strong a | lookups in programs using strong | ||
<a href="https://man.openbsd.org/pledge.2">pledge(2)</a> rules. | <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> rules. | ||
<li>Restrict pledge("vminfo") callers to read-only <a | <li>Restrict pledge("vminfo") callers to read-only <a | ||
href="https://man.openbsd.org/swapctl.2">swapctl(2)</a> operations. | href="https://man.openbsd.org/swapctl.2">swapctl(2)</a> operations. |