=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/72.html,v retrieving revision 1.30 retrieving revision 1.31 diff -u -r1.30 -r1.31 --- www/72.html 2022/10/01 21:23:40 1.30 +++ www/72.html 2022/10/01 21:36:27 1.31 @@ -515,7 +515,7 @@
  • Implemented privilege separation in xlock(1).
  • The TZ environment variable no longer supports absolute paths, - to fit better fit into the pledge(2) bypass model.
  • AF_UNIX socket bind(2) and ypconnect(2) system call creates a socket based upon the IP address encoded directly in a locked ypbinding file, thereby removing a horrible hack to support YP - lookups in programs using strong a + lookups in programs using strong pledge(2) rules.
  • Restrict pledge("vminfo") callers to read-only swapctl(2) operations.