CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/03/12 09:00:58
Modified files:
sys/kern : kern_pledge.c
Log message:
In the pledge_namei() callback, stop looking for the libc special files
when the open(2) system call was used, and only do this for __pledge_open(2)
which libc will use when it intends to access those files.
This breaks compatibility in a pretty major way, but that's the price being
paid to undo this historical shortcut I made to satisfy libc's internal
requirements and make pledge(2) a possibility.
All the other parts are already in the tree. There may be a few dangling
issues in ports or base which we'll find over time.
