commit 94be0bf03bf16b3423eec28500495569f0821c01 from: Omar Polo date: Sat Mar 20 11:08:17 2021 UTC update README commit - 8e09ee1d50250261fa8e978b9fbcea46dd0b015f commit + 94be0bf03bf16b3423eec28500495569f0821c01 blob - a9d22dd45698fb5ab3b9d2d299a483ac4cbc17bf blob + 35b722e4a58ae7b62617823c123a8c54847e5010 --- README.md +++ README.md @@ -151,7 +151,7 @@ pledges, while the executor has `stdio sendfd proc exe unveiled only the served directories. The logger process has pledge `stdio`. -On FreeBSD, the listener process is sandboxed with `capsicum(4)`. +On FreeBSD, the listener and logger process are sandboxed with `capsicum(4)`. On Linux, a `seccomp(2)` filter is installed in the listener to allow only certain syscalls, see [sandbox.c](sandbox.c) for more information