On Mon, 24 Sep 2018 09:41:02 -0600, "Theo de Raadt" wrote: > > I wonder if we can do unveil(NULL, NULL) for getent databases without > > an explicit file. A quick test seems to work for dns. > > If the pledge lacks "unveil", you get the same effect.
Am I correct in thinking that the veil is not activated for group, hosts and passwd? - todd
