>This was removed because the version of dig(1) in base uses pledge(2)
>to make restrictions on system calls - in this case it only allows port
>53 connections.
>
>(Technically it could be changed to use a different pledge if -p
>is specified, I'm not sure if this is desirable though).

That can certainly be added by people who want -p back.  Any change
will have to recognize that the default DNS port must go via SOCK_DNS,
because it is likely kernel & pf features will head towards managing
DNS requests tighter.

Someone who wants it should do it carefully :)

Reply via email to