=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/72.html,v retrieving revision 1.55 retrieving revision 1.56 diff -u -r1.55 -r1.56 --- www/72.html 2022/10/04 11:29:34 1.55 +++ www/72.html 2022/10/04 20:14:26 1.56 @@ -615,17 +615,19 @@ locked ypbinding file, thereby removing a horrible hack to support YP lookups in programs using strong pledge(2) rules. -
  • Processes that pledge("vminfo") may only use the Processes that pledge("vminfo") may now use the read-only swapctl(2) operations SWAP_NSWAP and SWAP_STATS providing information on swap devices.
  • Randomized the rekey interval of arc4random(3). -
  • Reduce the attack surface by introducing a 'local bind' mode to ypldap(8). In this mode +
  • Reduce the attack surface by introducing a 'local bind' mode to + ypldap(8). In this mode ypldap binds its RPC sockets to loopback, so YP services are only - available to the host it's running on. ypldap replaces ypbind(8) and writes the - YP binding file in /var/yp/binding itself. This also implies that ypbind(8) and ypserv(8). This also + implies that portmap(8) doesn't need to be running anymore when local bind mode is used.
  • Changed the /sbin daemons