Oh boy, I took a brief look into Makefile.yp(8), let's forget about this since ALL of them can have YP maps (except for /etc/shells).
On 06:20 Mon 24 Sep , Todd C. Miller wrote: > On Mon, 24 Sep 2018 12:25:51 +0100, Ricardo Mestre wrote: > > > Wouldn't this be already contemplated by pledge(getpw) on both group and > > passwd databases? I'm not touching those since they already whitelist > > all necessary files through pledge(2). > > I think you are correct, it appears the getpw pledge should unveil > what is needed for YP. Note that the ethers database can also be > stored YP. > > - todd >
