$ sysctl -n kern.version
OpenBSD 7.1-current (GENERIC.MP) #530: Tue May 17 21:52:44 MDT 2022
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
$ pkg_info -m | grep firefox
firefox-100.0 Firefox web browser
ugen0 at uhub0 port 1 "Generic Smart Card Reader Interface" rev 2.00/61.23 addr
2
I have a smart card configured with pcscd(8)
$ cat /etc/pkcs11/modules/onepin-opensc-pkcs11
module: /usr/local/lib/pkcs11/onepin-opensc-pkcs11.so
and loading the same module in Firefox's about:preferences#privacy
allows me to use it for log ins.
However, I need to do
$ cat /etc/firefox/pledge.main
disable
Otherwise it gets killed due to mlock(2) whenever I click on the login
button that causes the PIN prompt to appear:
firefox[71624]: pledge "", syscall 203
mlock(2) is not covered in any pledge(2) promise.
Does such use case fall under "just disable pledge" or is it something
worth fixing?
