From bffaeb0c372ca5fa5abd84dc3e7dd955ef2aa854 Mon Sep 17 00:00:00 2001 From: deraadt Date: Mon, 12 Oct 2015 23:32:55 +0000 Subject: [PATCH] satisfy jmc! --- lib/libc/sys/pledge.2 | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/lib/libc/sys/pledge.2 b/lib/libc/sys/pledge.2 index db9ef96cd27..bb716a87aac 100644 --- a/lib/libc/sys/pledge.2 +++ b/lib/libc/sys/pledge.2 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pledge.2,v 1.4 2015/10/12 21:40:38 deraadt Exp $ +.\" $OpenBSD: pledge.2,v 1.5 2015/10/12 23:32:55 deraadt Exp $ .\" .\" Copyright (c) 2015 Nicholas Marriott .\" @@ -433,11 +433,10 @@ Allows a process to call .Xr execve 2 . Coupled with the .Va "proc" -request, this allows a process to fork and execute another program; -that new environment will become un-pledged. -Hopefully this new program uses -.Xr pledge 2 -soon to reinstantiate the rules it promises to follow. +request, this allows a process to fork and execute another program. +The new program starts running without pledge active and hopefully +makes a new +.Xr pledge 2 . .It Va "prot_exec" Allows the use of .Dv PROT_EXEC -- 2.20.1