The pledge does not consider pluggable transports (fork + exec). However, I am not against introducing unveil.
On Thu, 22 Oct 2026 20:30:00 +0000, David Uhden Collado wrote: > Hello, > > Please find attached a patch adding pledge/unveil sandbox support > to net/tor 0.4.9.14. > > The patch implements an OpenBSD-specific sandbox using pledge() > to restrict system calls and unveil() to restrict filesystem access. > > It also enables Sandbox 1 in the default torrc, using the paths > provided by the OpenBSD port, including /etc/tor/torrc and /var/tor. > > The sandbox is designed for the packaged default configuration. > Custom filesystem paths are not included in its unveil policy. > > The patch also adjusts the configuration include test, which uses > temporary paths incompatible with this sandbox. > > I would appreciate review of the sandbox implementation and its > pledge/unveil restrictions. > > Thanks, > David. >>> text/x-patch content
