diff options
| author | Leah Rowe <leah@libreboot.org> | 2026-03-08 02:45:20 +0000 |
|---|---|---|
| committer | Leah Rowe <leah@libreboot.org> | 2026-03-08 02:47:08 +0000 |
| commit | 63fcc0891f2a2cef9a5c92b1ac17afce9fe53ad5 (patch) | |
| tree | 1a8e02f1a223596a10450fabebf195441bf79fce /config/coreboot/default | |
| parent | b1866312bd4738c1c4944252f3e499e6da516b78 (diff) | |
util/nvmutil: Do not allow /dev/urandom on OBSD
There, we use arc4random_buf which does not directly
access /dev/urandom on BSD; it uses a userspace method
instead, which bypasses this.
This is therefore much more restrictive, which is
exactly the point of unveil(2) and pledge(2); restrict
your program's operation while ensuring that it has what
it needs, to help with debugging and prevent common bugs.
Signed-off-by: Leah Rowe <leah@libreboot.org>
Diffstat (limited to 'config/coreboot/default')
0 files changed, 0 insertions, 0 deletions
