Cool :) Just did that, now the 4th time is the charm: Index: unveil.2 =================================================================== RCS file: /cvs/src/lib/libc/sys/unveil.2,v retrieving revision 1.1 diff -u -p -u -r1.1 unveil.2 --- unveil.2 13 Jul 2018 09:25:22 -0000 1.1 +++ unveil.2 13 Jul 2018 17:01:20 -0000 @@ -27,15 +27,15 @@ .Sh DESCRIPTION The first call to .Nm -removes visibility of the envire filesystem from all other -filesystem-related system calls ( +removes visibility of the entire filesystem from all other +filesystem-related system calls (such as .Xr open 2 , -.Xr chmod 2 , -.Xe rename 2, -etc). +.Xr chmod 2 +and +.Xr rename 2 ) , except for the specified -.Ar path. -Subequent calls to +.Ar path . +Subsequent calls to .Nm expose additional views of the filesystem. .Pp @@ -56,12 +56,12 @@ to remove the "unveil" permission. .Pp The .Fa flags -argument points to a string consisting of the following characters. +argument points to a string consisting of the following characters. .Pp .Bl -tag -width c -offset indent -compact .It Dv r .Ar path -hould be made be available for read operations corresponding to +should be made available for read operations corresponding to .Xr pledge 2 promise .Ar rpath . @@ -73,13 +73,13 @@ promise .Ar wpath . .It Dv x .Ar path -should be available for execute operations corresponding to +should be available for execute operations corresponding to .Xr pledge 2 promise .Ar wpath . .It Dv c .Ar path -should be allowed to be created and removed, corresponding to +should be allowed to be created and removed, corresponding to .Xr pledge 2 promise .Ar cpath .
On 17:57 Fri 13 Jul , Jason McIntyre wrote: > On Fri, Jul 13, 2018 at 05:51:44PM +0100, Ricardo Mestre wrote: > > Hi Jason, > > > > Like this? While reviewing I found another tyop > > > > yes. frankly i'd run it through mandoc -Tlint too. > jmc
