Todd C. Miller <[email protected]> wrote: > On Mon, 24 Sep 2018 09:21:17 -0600, "Theo de Raadt" wrote: > > > Only passwd, group, netid, and ethers are supported. Well, there > > is hosts (== networks in our case) but that translation happens > > seperately. > > That's what I thought from a grep of libc. So I don't see any > reason why Ricardo's diff can't go in.
I agree. > I wonder if we can do unveil(NULL, NULL) for getent databases without > an explicit file. A quick test seems to work for dns. If the pledge lacks "unveil", you get the same effect.
