On 2019/12/10 13:57, Reyk Floeter wrote:
> +# U2F/FIDO keys
> +/dev/uhid0 rw
> +/dev/uhid1 rw
> +/dev/uhid2 rw
> +/dev/uhid3 rw
> +/dev/uhid4 rw
> +/dev/uhid5 rw
> +/dev/uhid6 rw
> +/dev/uhid7 rw
> +/dev/uhid8 rw
> +/dev/uhid9 rw

BTW there are several entries in dmesglog with uhid18 (Microsoft Surface
Type Cover) and one with uhid40 (headset + docking station + others).
The 40 seems excessive but it might be worth going up to, say, 20.
(Alternatively it could be dropped to 7 to align with the number of
device nodes created by MAKEDEV by default ..)

> +This currently only works with pledge.main = disable.

Another option would be to do this, and remove some lines from the pkg-readme...

diff -u -p -r1.1 pledge.main
--- pledge.main 3 Dec 2019 17:00:46 -0000       1.1
+++ pledge.main 10 Dec 2019 14:26:25 -0000
@@ -1,24 +1 @@
+disable
-stdio
-rpath
-wpath
-cpath
-inet
-proc
-exec
-prot_exec
-flock
-ps
-sendfd
-recvfd
-dns
-vminfo
-tty
-drm
-unix
-fattr
-getpw
-mcast
-# only needed for WebRTC
-video
-# only needed if not running sndiod(8)
-audio

Reply via email to