> It looks like csh would currently need to pledge("id") in order for the > builtin nice to work --- setpriority() is called in three places > depending on how nice is invoked. However, adding "id" to a shell > seems a bit scary. > > Would it be preferable to mark > [SYS_setpriority] = PLEDGE_PROC | PLEDGE_ID?
I prefer that, and will do that. However I'd like a semantic where priority can only be adjusted downwards. semarie was talking about that as well. I'll commit PLEDGE_PROC | PLEDGE_ID, and hope you two write such a diff...