ok
George Brown(321.geo...@gmail.com) on 2019.12.04 18:57:17 +0000:
> After pledge is immediately called without the unveil promise so this
> seems redundant.
>
> diff --git a/usr.sbin/rpki-client/main.c b/usr.sbin/rpki-client/main.c
> index f05ec1c5837..53ee4223371 100644
> --- a/usr.sbin/rpki-client/main.c
> +++ b/usr.sbin/rpki-client/main.c
> @@ -1498,8 +1498,6 @@ main(int argc, char *argv[])
> /* Only allow access to BASE_DIR. */
> if (unveil(BASE_DIR, "r") == -1)
> err(1, "%s: unveil", BASE_DIR);
> - if (unveil(NULL, NULL) == -1)
> - err(1, "unveil");
> if (pledge("stdio rpath", NULL) == -1)
> err(1, "pledge");
> proc_parser(fd[0], force);
>
