summaryrefslogtreecommitdiff
path: root/config/snippet/mit
diff options
context:
space:
mode:
authorLeah Rowe <leah@libreboot.org>2026-03-08 02:45:20 +0000
committerLeah Rowe <leah@libreboot.org>2026-03-08 02:47:08 +0000
commit63fcc0891f2a2cef9a5c92b1ac17afce9fe53ad5 (patch)
tree1a8e02f1a223596a10450fabebf195441bf79fce /config/snippet/mit
parentb1866312bd4738c1c4944252f3e499e6da516b78 (diff)
util/nvmutil: Do not allow /dev/urandom on OBSD
There, we use arc4random_buf which does not directly access /dev/urandom on BSD; it uses a userspace method instead, which bypasses this. This is therefore much more restrictive, which is exactly the point of unveil(2) and pledge(2); restrict your program's operation while ensuring that it has what it needs, to help with debugging and prevent common bugs. Signed-off-by: Leah Rowe <leah@libreboot.org>
Diffstat (limited to 'config/snippet/mit')
0 files changed, 0 insertions, 0 deletions