===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/innovations.html,v
retrieving revision 1.84
retrieving revision 1.85
diff -c -r1.84 -r1.85
*** www/innovations.html	2019/11/29 17:25:40	1.84
--- www/innovations.html	2019/11/29 20:26:25	1.85
***************
*** 201,206 ****
--- 201,209 ----
      <li>Similar to the opportunistic verification in <b>MAP_STACK</b>,
  	system-calls can no longer be performed from PROT_WRITE memory.
  	Theo de Raadt, June 2, 2019.
+     <li>System calls may only be performed from selected code regions
+         (main program, ld.so, libc.so, and sigtramp).
+ 	Theo de Raadt, November 28, 2019.
  </ul>
  
  <h3>Functions</h3>