On Sat, 28 Nov 2015 20:19:22 -0800, Serguey Parkhomovsky wrote: > Looks like you beat me to it! skeyinit still needs pledge getpw, though:
It's not needed for the plain passwd db but maybe it is for YP. I've added getpw in the pledge call and then revoked getpw, proc, and exec once authentication is complete. - todd
