On Fri, Jul 13, 2018 at 06:04:29PM +0100, Ricardo Mestre wrote: > Cool :) Just did that, now the 4th time is the charm: >
fine by me. jmc > Index: unveil.2 > =================================================================== > RCS file: /cvs/src/lib/libc/sys/unveil.2,v > retrieving revision 1.1 > diff -u -p -u -r1.1 unveil.2 > --- unveil.2 13 Jul 2018 09:25:22 -0000 1.1 > +++ unveil.2 13 Jul 2018 17:01:20 -0000 > @@ -27,15 +27,15 @@ > .Sh DESCRIPTION > The first call to > .Nm > -removes visibility of the envire filesystem from all other > -filesystem-related system calls ( > +removes visibility of the entire filesystem from all other > +filesystem-related system calls (such as > .Xr open 2 , > -.Xr chmod 2 , > -.Xe rename 2, > -etc). > +.Xr chmod 2 > +and > +.Xr rename 2 ) , > except for the specified > -.Ar path. > -Subequent calls to > +.Ar path . > +Subsequent calls to > .Nm > expose additional views of the filesystem. > .Pp > @@ -56,12 +56,12 @@ to remove the "unveil" permission. > .Pp > The > .Fa flags > -argument points to a string consisting of the following characters. > +argument points to a string consisting of the following characters. > .Pp > .Bl -tag -width c -offset indent -compact > .It Dv r > .Ar path > -hould be made be available for read operations corresponding to > +should be made available for read operations corresponding to > .Xr pledge 2 > promise > .Ar rpath . > @@ -73,13 +73,13 @@ promise > .Ar wpath . > .It Dv x > .Ar path > -should be available for execute operations corresponding to > +should be available for execute operations corresponding to > .Xr pledge 2 > promise > .Ar wpath . > .It Dv c > .Ar path > -should be allowed to be created and removed, corresponding to > +should be allowed to be created and removed, corresponding to > .Xr pledge 2 > promise > .Ar cpath . > > On 17:57 Fri 13 Jul , Jason McIntyre wrote: > > On Fri, Jul 13, 2018 at 05:51:44PM +0100, Ricardo Mestre wrote: > > > Hi Jason, > > > > > > Like this? While reviewing I found another tyop > > > > > > > yes. frankly i'd run it through mandoc -Tlint too. > > jmc >
