diff options
| author | Theo de Raadt <deraadt@cvs.openbsd.org> | 2015-10-12 23:32:56 +0000 |
|---|---|---|
| committer | Theo de Raadt <deraadt@cvs.openbsd.org> | 2015-10-12 23:32:56 +0000 |
| commit | 1b2deb5c5c30f7fe0c6f953d9fab5867d378de04 (patch) | |
| tree | 7ca0922f04c2dbcc31d89282aa4c2a3ffb736db8 /lib | |
| parent | dc45bd8c49a1b0655efa956dcf2a390a19f7df0e (diff) | |
satisfy jmc!
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/libc/sys/pledge.2 | 11 |
1 files changed, 5 insertions, 6 deletions
diff --git a/lib/libc/sys/pledge.2 b/lib/libc/sys/pledge.2 index db9ef96cd27..bb716a87aac 100644 --- a/lib/libc/sys/pledge.2 +++ b/lib/libc/sys/pledge.2 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pledge.2,v 1.4 2015/10/12 21:40:38 deraadt Exp $ +.\" $OpenBSD: pledge.2,v 1.5 2015/10/12 23:32:55 deraadt Exp $ .\" .\" Copyright (c) 2015 Nicholas Marriott <nicm@openbsd.org> .\" @@ -433,11 +433,10 @@ Allows a process to call .Xr execve 2 . Coupled with the .Va "proc" -request, this allows a process to fork and execute another program; -that new environment will become un-pledged. -Hopefully this new program uses -.Xr pledge 2 -soon to reinstantiate the rules it promises to follow. +request, this allows a process to fork and execute another program. +The new program starts running without pledge active and hopefully +makes a new +.Xr pledge 2 . .It Va "prot_exec" Allows the use of .Dv PROT_EXEC |