On Tue, 08 Feb 2022 19:37:26 -0600, Scott Cheloha wrote: > - pledge(2) initially with "stdio rpath" at the top of main(). > We know we need to read a file at this point but don't yet > know which one. > > - pledge(2) down to "stdio" after we have opened the file > in question and called fstat(2) to get its size. The rest > of the program is computation and stdio. > > - Remove the unveil(2) call. We don't need it if we're only > working with one file and it's already open.
Makes sense to me. I don't think the unveil() really buys us anything if we can drop rpath. OK millert@ - todd
