**SPLASH**  I've been made to walk the plank!
*hastily assembles flotilla of blowfish*

https://fremissant.net/pledge
https://marc.info/?l=openbsd-tech&m=155762556220352&w=2

Your captain (master?) has spoken, and you are not
allowed to know under which promises the processes on your
system are running (though you can try to grep for this
information in the sources if you have source).

Not even if you are root; and not even yourself (pid 0).

Or, you can run my patch and have all this and more, safely.
It is compliant with the pledge mandate that promises can
never be increased, and indeed with all the intricacies of
pledge(2) semantics.  [If it isn't, please send an email.]

I don't much care who runs it besides me, though I do sense
this is a pivotal project:  either everything I ever did will
get released after this, or silence.  This gesture in particular
was made to increase the security of my own system, learn some
systems programming, and above all as an expression of my
appreciation for UNIX generally.  If it helps others to any
of those things, so much the better.

I'll keep the project pages (link at top) up to date, and decide
the pledge(1) licence soon.  I've uploaded a patched amd64
kernel image (built from mid-April OpenBSD -current sources),
as well as compatible pledge(1) executable, in case you want to
play in a VM.  I've not installed 6.5 locally yet, but when I do
I'll update the available images.

If this work interests you, by all means feel free to contact
me privately, you probably won't find me on the lists.

Cheerio,
Andy.

Reply via email to