On Thu, Aug 25, 2016 at 03:51:52AM -0400, Rob Pierce wrote: > ntpd was pledged in 5.9.
Right. In fact, unless I'm missing something, the only pledge-related commit to ntpd was due to the removal of chroot from the supported syscalls, so I think "Improved pledge(2) support" is still overstating the case a bit. I think it would be better to remove that bullet point. Objections? > Rob > > Index: 60.html > =================================================================== > RCS file: /cvs/www/60.html,v > retrieving revision 1.70 > diff -u -p -r1.70 60.html > --- 60.html 24 Aug 2016 20:47:30 -0000 1.70 > +++ 60.html 25 Aug 2016 07:48:55 -0000 > @@ -598,7 +598,7 @@ to 6.0. > <li>Moved the execution of constraints from the ntp process to the > parent process, allowing for better privilege separation since the > ntp process can be further restricted. > - <li>Added > + <li>Improved > <a href="http://man.openbsd.org/pledge.2";>pledge(2)</a> > support. > <li>Fixed high CPU usage when the network is down. >
