Post #1531759
2026-04-01 10:12 UTC
@alderwick Note that unveil would be useless for this, as it only affects the process it's run in. exec() resets the unveil state, and your child processes can do whatever they want.
It's a common misconception people have about unveil but OpenBSD refuses to document this :(
Replies (1)
-
@alderwick@merveilles.town 2026-04-01 11:07
@dzwdz If you use pledge() with non-NULL execpromises, then the unveil state persists into the exec'ed process too.