On Sat, May 07, 2016 at 06:48:58AM -0500, Edgar Pettijohn wrote: > > > > else, if it isn't in xclock code, it could be a open(2) call in some > > X11R6 library. > > > I looked all I found was access() which if I'm reading pledge correctly it > doesn't need pledge. Is that right? >
now, I am unsure about correctly understood your message :) access(2) requires "rpath" too. But some paths could be whitelisted (only "/etc/localtime" and "/var/run/ypbind.lock"). -- Sebastien Marie
