Symbol: pledge
bin/cat/cat.c
62
if (pledge("stdio rpath", NULL) == -1)
bin/cat/cat.c
98
if (pledge("stdio", NULL) == -1)
bin/chmod/chmod.c
155
if (pledge("stdio rpath fattr", NULL) == -1)
bin/cp/cp.c
143
if (pledge("stdio rpath wpath cpath fattr", NULL) == -1)
bin/csh/csh.c
227
if (pledge("stdio rpath wpath cpath fattr getpw proc exec tty",
bin/date/date.c
116
if (pledge("stdio", NULL) == -1)
bin/date/date.c
150
if (pledge("stdio settime wpath", NULL) == -1)
bin/dd/dd.c
156
if (pledge("stdio", NULL) == -1)
bin/df/df.c
80
if (pledge("stdio rpath", NULL) == -1)
bin/echo/echo.c
47
if (pledge("stdio", NULL) == -1)
bin/ed/main.c
130
if (pledge("stdio rpath wpath cpath proc exec tty", NULL) == -1)
bin/expr/expr.c
498
if (pledge("stdio", NULL) == -1)
bin/kill/kill.c
56
if (pledge("stdio proc", NULL) == -1)
bin/ksh/main.c
158
if (pledge("stdio rpath wpath cpath fattr flock getpw proc "
bin/ksh/main.c
164
if (pledge("stdio rpath wpath cpath fattr flock getpw proc "
bin/ksh/misc.c
303
if (pledge("stdio rpath wpath cpath fattr flock getpw proc "
bin/ln/ln.c
61
if (pledge("stdio rpath cpath", NULL) == -1)
bin/ls/ls.c
127
if (pledge("stdio rpath getpw", NULL) == -1)
bin/md5/md5.c
436
if (pledge("stdio rpath wpath cpath", NULL) == -1)
bin/md5/md5.c
550
if (pledge("stdio rpath", NULL) == -1)
bin/mkdir/mkdir.c
83
if (pledge("stdio rpath cpath fattr", NULL) == -1)
bin/mt/mtrmt.c
147
if (pledge("stdio", NULL) == -1)
bin/pax/ar_io.c
1265
if (pledge("stdio rpath getpw proc tape",
bin/pax/ar_io.c
1270
if (pledge("stdio rpath wpath cpath fattr dpath getpw proc tape",
bin/pax/pax.c
279
if (pledge("stdio rpath getpw tape",
bin/pax/pax.c
284
if (pledge("stdio rpath wpath getpw tape",
bin/pax/pax.c
288
if (pledge("stdio rpath wpath cpath fattr dpath getpw tape",
bin/pax/pax.c
294
if (pledge("stdio rpath getpw proc exec tape",
bin/pax/pax.c
299
if (pledge("stdio rpath wpath cpath fattr dpath getpw proc exec tape",
bin/ps/ps.c
312
if (pledge("stdio rpath getpw ps", NULL) == -1)
bin/pwd/pwd.c
50
if (pledge("stdio rpath", NULL) == -1)
bin/rm/rm.c
106
if (pledge("stdio rpath wpath cpath getpw", NULL) == -1)
bin/rm/rm.c
109
if (pledge("stdio rpath cpath getpw", NULL) == -1)
bin/rmdir/rmdir.c
52
if (pledge("stdio cpath", NULL) == -1)
bin/sleep/sleep.c
54
if (pledge("stdio", NULL) == -1)
bin/stty/stty.c
107
if (pledge("stdio", NULL) == -1)
bin/stty/stty.c
114
if (pledge("stdio", NULL) == -1)
bin/test/test.c
164
if (pledge("stdio rpath", NULL) == -1)
distrib/special/more/more.c
210
if (pledge("stdio rpath tty", NULL) == -1) {
games/adventure/main.c
121
if (pledge("stdio rpath wpath cpath", NULL) == -1)
games/adventure/setup.c
67
if (pledge("stdio rpath", NULL) == -1)
games/adventure/setup.c
78
if (pledge("stdio", NULL) == -1)
games/arithmetic/arithmetic.c
103
if (pledge("stdio", NULL) == -1)
games/atc/main.c
142
if (pledge("stdio rpath wpath cpath flock tty", NULL) == -1)
games/backgammon/backgammon/main.c
107
if (pledge("stdio rpath wpath cpath tty exec", NULL) == -1)
games/backgammon/backgammon/main.c
128
if (pledge("stdio rpath wpath cpath tty", NULL) == -1)
games/backgammon/backgammon/main.c
99
if (pledge("stdio rpath wpath cpath tty", NULL) == -1)
games/backgammon/teachgammon/teach.c
59
if (pledge("stdio rpath wpath cpath tty exec", NULL) == -1)
games/banner/banner.c
1120
if (pledge("stdio", NULL) == -1)
games/battlestar/battlestar.c
64
if (pledge("stdio rpath wpath cpath tty", NULL) == -1)
games/bcd/bcd.c
126
if (pledge("stdio", NULL) == -1)
games/boggle/boggle/bog.c
165
if (pledge("stdio rpath tty", NULL) == -1)
games/boggle/mkdict/mkdict.c
63
if (pledge("stdio", NULL) == -1)
games/boggle/mkindex/mkindex.c
52
if (pledge("stdio", NULL) == -1)
games/bs/bs.c
1342
if (pledge("stdio tty", NULL) == -1)
games/caesar/caesar.c
75
if (pledge("stdio", NULL) == -1)
games/canfield/canfield/canfield.c
1744
if (pledge("stdio tty", NULL) == -1)
games/canfield/cfscores/cfscores.c
64
if (pledge("stdio rpath", NULL) == -1)
games/cribbage/crib.c
99
if (pledge("stdio tty", NULL) == -1)
games/factor/factor.c
88
if (pledge("stdio", NULL) == -1)
games/fish/fish.c
105
if (pledge("stdio", NULL) == -1)
games/fish/fish.c
90
if (pledge("stdio rpath proc exec", NULL) == -1)
games/fortune/fortune/fortune.c
154
if (pledge("stdio rpath", NULL) == -1) {
games/fortune/strfile/strfile.c
139
if (pledge("stdio rpath wpath cpath", NULL) == -1)
games/fortune/strfile/strfile.c
150
if (pledge("stdio", NULL) == -1)
games/fortune/unstr/unstr.c
73
if (pledge("stdio rpath wpath cpath", NULL) == -1)
games/fortune/unstr/unstr.c
82
if (pledge("stdio", NULL) == -1)
games/gomoku/main.c
124
if (pledge("stdio rpath wpath cpath tty", NULL) == -1)
games/grdc/grdc.c
117
if (pledge("stdio tty", NULL) == -1)
games/hack/makedefs.c
101
if (pledge("stdio", NULL) == -1)
games/hangman/main.c
78
if (pledge("stdio tty", NULL) == -1)
games/mille/mille.c
74
if (pledge("stdio rpath wpath cpath tty", NULL) == -1)
games/monop/initdeck.c
72
if (pledge("stdio rpath wpath cpath", NULL) == -1)
games/monop/initdeck.c
91
if (pledge("stdio", NULL) == -1)
games/monop/monop.c
53
if (pledge("stdio rpath wpath cpath", NULL) == -1)
games/morse/morse.c
134
if (pledge("stdio", NULL) == -1)
games/number/number.c
79
if (pledge("stdio", NULL) == -1)
games/pig/pig.c
50
if (pledge("stdio", NULL) == -1)
games/pom/pom.c
85
if (pledge("stdio", NULL) == -1)
games/ppt/ppt.c
62
if (pledge("stdio", NULL) == -1)
games/primes/primes.c
103
if (pledge("stdio", NULL) == -1)
games/quiz/quiz.c
66
if (pledge("stdio rpath proc exec", NULL) == -1)
games/quiz/quiz.c
91
if (pledge("stdio rpath", NULL) == -1)
games/quiz/quiz.c
96
if (pledge("stdio", NULL) == -1)
games/rain/rain.c
87
if (pledge("stdio tty", NULL) == -1)
games/random/random.c
173
if (pledge("stdio", NULL) == -1)
games/robots/main.c
139
if (pledge("stdio tty", NULL) == -1)
games/snake/snake.c
180
if (pledge("stdio tty", NULL) == -1)
games/tetris/tetris.c
170
if (pledge("stdio rpath wpath cpath tty unveil", NULL) == -1)
games/tetris/tetris.c
239
if (pledge("stdio rpath wpath cpath tty", NULL) == -1)
games/trek/main.c
134
if (pledge("stdio", NULL) == -1)
games/worm/worm.c
100
if (pledge("stdio tty", NULL) == -1)
games/worms/worms.c
234
if (pledge("stdio tty", NULL) == -1)
games/wump/wump.c
138
if (pledge("stdio rpath proc exec", NULL) == -1)
games/wump/wump.c
226
if (pledge("stdio", NULL) == -1)
include/unistd.h
534
int pledge(const char *, const char *);
lib/libc/hidden/unistd.h
117
PROTO_NORMAL(pledge);
libexec/comsat/comsat.c
102
if (pledge("stdio rpath wpath proc tty", NULL) == -1)
libexec/fingerd/fingerd.c
113
if (pledge("stdio inet dns proc exec", NULL) == -1)
libexec/fingerd/fingerd.c
126
if (pledge("stdio dns proc exec", NULL) == -1)
libexec/fingerd/fingerd.c
136
if (pledge("stdio proc exec", NULL) == -1)
libexec/fingerd/fingerd.c
216
if (pledge("stdio", NULL) == -1)
libexec/ftpd/monitor.c
297
if (pledge("stdio rpath wpath cpath inet recvfd"
libexec/ftpd/monitor.c
305
if (pledge("stdio inet sendfd recvfd proc",
libexec/getty/main.c
214
if (pledge("stdio rpath proc exec tty", NULL) == -1) {
libexec/getty/main.c
254
if (pledge("stdio rpath proc exec tty", NULL) == -1) {
libexec/ld.so/ldconfig/ldconfig.c
97
if (pledge("stdio rpath wpath cpath fattr", NULL) == -1)
libexec/ld.so/ldd/ldd.c
169
if (pledge("stdio rpath prot_exec", NULL) == -1)
libexec/ld.so/ldd/ldd.c
186
if (pledge("stdio rpath exec", "stdio rpath") == -1)
libexec/ld.so/ldd/ldd.c
51
if (pledge("stdio rpath proc exec prot_exec", NULL) == -1)
libexec/lockspool/lockspool.c
58
if (pledge("stdio rpath wpath getpw cpath fattr", NULL) == -1)
libexec/login_chpass/login_chpass.c
61
if (pledge("stdio exec", NULL) == -1)
libexec/login_passwd/login_passwd.c
112
if (pledge("stdio rpath tty id", NULL) == -1) {
libexec/login_passwd/login_passwd.c
157
if (pledge("stdio rpath", NULL) == -1) {
libexec/login_radius/login_radius.c
94
if (pledge("stdio rpath wpath inet dns tty", NULL) == -1) {
libexec/login_reject/login_reject.c
61
if (pledge("stdio rpath tty", NULL) == -1) {
libexec/login_skey/login_skey.c
69
if (pledge("stdio rpath wpath flock sendfd proc tty", NULL) == -1) {
libexec/login_token/login_token.c
84
if (pledge("stdio rpath wpath cpath fattr flock getpw tty", NULL) == -1) {
libexec/login_yubikey/login_yubikey.c
75
if (pledge("stdio tty wpath rpath cpath", NULL) == -1) {
libexec/spamd-setup/spamd-setup.c
854
if (pledge("stdio rpath inet proc exec id", NULL) == -1)
libexec/spamd/grey.c
1092
if (pledge("stdio rpath wpath inet flock proc exec", NULL) == -1) {
libexec/spamd/spamd.c
1537
if (pledge("stdio inet", NULL) == -1)
libexec/spamlogd/spamlogd.c
468
if (pledge("stdio rpath wpath inet flock", NULL) == -1)
libexec/spamlogd/spamlogd.c
471
if (pledge("stdio rpath wpath flock", NULL) == -1)
libexec/talkd/talkd.c
84
if (pledge("stdio rpath wpath cpath inet dns", NULL) == -1) {
libexec/tradcpp/main.c
1058
if (pledge("stdio rpath wpath cpath", NULL) == -1) {
regress/lib/libcrypto/init/init_pledge.c
28
pledge("stdio", NULL);
regress/sys/kern/pledge/execpromise/execpromise.c
51
if (pledge(argv[0], "") == -1)
regress/sys/kern/pledge/execpromise/execpromise.c
75
if (pledge("stdio exec", argv[0]) == -1)
regress/sys/kern/pledge/filedescriptor/main.c
35
if (pledge("exec stdio proc recvfd rpath sendfd", NULL) == -1)
regress/sys/kern/pledge/generic/main.c
67
if (pledge("stdio rpath", NULL) != 0)
regress/sys/kern/pledge/generic/manager.c
239
if (request && pledge(request, NULL) != 0)
regress/sys/kern/pledge/generic/test_stdio.c
28
if (pledge("stdio", NULL) == -1)
regress/sys/kern/pledge/generic/test_tty.c
43
if (pledge("stdio tty proc", NULL) == -1)
regress/sys/kern/pledge/generic/test_tty.c
52
if (pledge("stdio tty", NULL) == -1)
regress/sys/kern/pledge/ioctl/pfioctl1.c
62
if (pledge("stdio pf", NULL) == -1)
regress/sys/kern/pledge/ioctl/pfioctl2.c
56
if (pledge("stdio pf", NULL) == -1)
regress/sys/kern/pledge/ioctl/unfdpass.c
132
if (pledge("stdio recvfd pf", NULL) == -1)
regress/sys/kern/pledge/ioctl/unfdpass.c
231
if (pledge("stdio sendfd", NULL) == -1)
regress/sys/kern/pledge/ioctl/unfdpass.c
86
if (pledge("stdio rpath wpath sendfd recvfd proc pf", NULL)
regress/sys/kern/pledge/open/open.c
54
if (strcmp(promise, NO_PLEDGE) != 0 && pledge(promise, NULL) == -1)
regress/sys/kern/pledge/sendrecvfd/sendrecvfd.c
110
if (pledge("stdio sendfd", NULL) == -1)
regress/sys/kern/pledge/sendrecvfd/sendrecvfd.c
115
if (pledge("stdio", NULL) == -1)
regress/sys/kern/pledge/sendrecvfd/sendrecvfd.c
57
if (pledge("stdio recvfd", NULL) == -1)
regress/sys/kern/pledge/sendrecvfd/sendrecvfd.c
62
if (pledge("stdio", NULL) == -1)
regress/sys/kern/pledge/sigabrt/sigabrt.c
40
if (pledge("", NULL) == -1)
regress/sys/kern/pledge/sockopt/sockopt.c
52
if (pledge(promises, NULL) == -1)
regress/sys/kern/unveil/syscalls.c
162
UV_SHOULD_SUCCEED((pledge("unveil stdio rpath cpath wpath exec", NULL) == -1), "pledge");
regress/sys/kern/unveil/syscalls.c
297
UV_SHOULD_SUCCEED((pledge("unveil stdio rpath cpath wpath exec", NULL) == -1), "pledge");
regress/sys/kern/unveil/syscalls.c
318
UV_SHOULD_SUCCEED((pledge("unveil stdio rpath cpath wpath exec", NULL) == -1), "pledge");
regress/sys/kern/unveil/syscalls.c
323
UV_SHOULD_SUCCEED((pledge("stdio rpath cpath wpath", NULL) == -1), "pledge");
regress/sys/kern/unveil/syscalls.c
353
UV_SHOULD_SUCCEED((pledge("unveil stdio fattr rpath cpath wpath", NULL) == -1),
regress/sys/kern/unveil/syscalls.c
372
UV_SHOULD_SUCCEED((pledge("unveil stdio fattr rpath cpath wpath", NULL) == -1),
regress/sys/kern/unveil/syscalls.c
405
UV_SHOULD_SUCCEED((pledge("stdio fattr rpath", NULL) == -1), "pledge");
regress/sys/kern/unveil/syscalls.c
483
UV_SHOULD_SUCCEED((pledge("stdio fattr rpath wpath cpath", NULL) == -1),
regress/sys/kern/unveil/syscalls.c
518
UV_SHOULD_SUCCEED((pledge("stdio fattr rpath", NULL) == -1), "pledge");
regress/sys/kern/unveil/syscalls.c
537
UV_SHOULD_SUCCEED((pledge("stdio fattr rpath", NULL) == -1), "pledge");
regress/sys/kern/unveil/syscalls.c
553
UV_SHOULD_SUCCEED((pledge("stdio fattr rpath", NULL) == -1), "pledge");
regress/sys/kern/unveil/syscalls.c
573
UV_SHOULD_SUCCEED((pledge("stdio fattr rpath", NULL) == -1), "pledge");
regress/sys/kern/unveil/syscalls.c
598
UV_SHOULD_SUCCEED((pledge("stdio fattr rpath", NULL) == -1), "pledge");
regress/sys/kern/unveil/syscalls.c
620
UV_SHOULD_SUCCEED((pledge("unveil stdio fattr rpath cpath wpath", NULL) == -1),
regress/sys/kern/unveil/syscalls.c
658
UV_SHOULD_SUCCEED((pledge("stdio fattr rpath unveil", NULL) == -1), "pledge");
regress/sys/kern/unveil/syscalls.c
706
UV_SHOULD_SUCCEED((pledge("unveil stdio fattr exec", NULL) == -1), "pledge");
regress/sys/kern/unveil/syscalls.c
726
UV_SHOULD_SUCCEED((pledge("unveil stdio fattr exec", NULL) == -1), "pledge");
regress/sys/kern/unveil/syscalls.c
773
UV_SHOULD_SUCCEED((pledge("stdio tmppath", NULL) == -1), "pledge");
regress/sys/kern/unveil/syscalls.c
843
UV_SHOULD_SUCCEED((pledge("stdio fattr rpath", NULL) == -1), "pledge");
regress/sys/netinet/ipsec/nonxt-reflect.c
58
if (pledge("stdio inet dns proc", NULL) == -1)
regress/sys/netinet/ipsec/nonxt-reflect.c
91
if (pledge("stdio inet", NULL) == -1)
regress/sys/netinet/ipsec/nonxt-sendrecv.c
114
if (pledge("stdio inet", NULL) == -1)
regress/sys/netinet/ipsec/nonxt-sendrecv.c
64
if (pledge("stdio inet dns", NULL) == -1)
regress/usr.sbin/rpki-client/test-http.c
146
if (pledge("stdio rpath inet dns recvfd", NULL) == -1)
sbin/clri/clri.c
84
if (pledge("stdio", NULL) == -1)
sbin/dhcp6leased/dhcp6leased.c
318
if (pledge("stdio inet rpath wpath cpath fattr sendfd wroute", NULL)
sbin/dhcp6leased/engine.c
205
if (pledge("stdio recvfd", NULL) == -1)
sbin/dhcp6leased/engine.c
442
if (pledge("stdio", NULL) == -1)
sbin/dhcp6leased/frontend.c
152
if (pledge("stdio unix recvfd route", NULL) == -1)
sbin/dhcpleased/dhcpleased.c
333
if (pledge("stdio inet rpath wpath sendfd wroute bpf", NULL) == -1)
sbin/dhcpleased/engine.c
216
if (pledge("stdio recvfd", NULL) == -1)
sbin/dhcpleased/engine.c
465
if (pledge("stdio", NULL) == -1)
sbin/dhcpleased/frontend.c
165
if (pledge("stdio unix recvfd route", NULL) == -1)
sbin/dhcpleased/frontend.c
665
if (pledge("stdio unix recvfd", NULL) == -1)
sbin/disklabel/disklabel.c
214
if (pledge("stdio rpath wpath cpath disklabel proc "
sbin/disklabel/disklabel.c
218
if (pledge("stdio rpath wpath cpath disklabel", NULL)
sbin/disklabel/disklabel.c
222
if (pledge("stdio rpath wpath disklabel", NULL) == -1)
sbin/disklabel/disklabel.c
237
if (pledge("stdio rpath wpath disklabel", NULL) == -1)
sbin/disklabel/disklabel.c
261
if (pledge("stdio", NULL) == -1)
sbin/dmesg/dmesg.c
116
if (pledge("stdio", NULL) == -1)
sbin/dmesg/dmesg.c
131
if (pledge("stdio", NULL) == -1)
sbin/dumpfs/dumpfs.c
102
if (pledge("stdio rpath disklabel", NULL) == -1)
sbin/fdisk/fdisk.c
168
if (pledge("stdio", NULL) == -1)
sbin/fdisk/fdisk.c
180
if (pledge("stdio disklabel proc exec rpath", NULL) == -1)
sbin/fsck/fsck.c
118
if (pledge("stdio rpath wpath disklabel proc exec", NULL) == -1)
sbin/fsck_ext2fs/setup.c
127
if (pledge("stdio getpw", NULL) == -1)
sbin/fsck_ext2fs/setup.c
130
if (pledge("stdio", NULL) == -1)
sbin/fsck_ffs/setup.c
109
if (pledge("stdio rpath wpath getpw tty disklabel",
sbin/fsck_ffs/setup.c
154
if (pledge("stdio rpath getpw tty", NULL) == -1)
sbin/fsck_ffs/setup.c
158
if (pledge("stdio getpw", NULL) == -1)
sbin/fsck_ffs/setup.c
161
if (pledge("stdio", NULL) == -1)
sbin/fsck_msdos/check.c
84
if (pledge("stdio", NULL) == -1)
sbin/fsirand/fsirand.c
125
if (pledge("stdio", NULL) == -1)
sbin/growfs/growfs.c
1782
if (pledge("stdio disklabel", NULL) == -1)
sbin/iked/ca.c
121
if (pledge("stdio rpath recvfd", NULL) == -1)
sbin/iked/control.c
73
if (pledge("stdio unix recvfd", NULL) == -1)
sbin/iked/iked.c
305
if (pledge("stdio rpath proc dns inet route wroute sendfd", NULL) == -1)
sbin/iked/ikev2.c
220
if (pledge("stdio inet recvfd", NULL) == -1)
sbin/ipsecctl/ipsecctl.c
709
if (pledge("stdio dns", NULL) == -1)
sbin/ipsecctl/ipsecctl.c
750
if (pledge("stdio", NULL) == -1)
sbin/ipsecctl/pfkey.c
1327
if (pledge("stdio", NULL) == -1)
sbin/mknod/mknod.c
57
if (pledge("stdio dpath", NULL) == -1)
sbin/mount/mount.c
183
if (pledge("stdio rpath disklabel proc exec", NULL) == -1)
sbin/mountd/mountd.c
318
if (pledge("stdio rpath inet dns getpw", NULL) == -1) {
sbin/ncheck_ffs/ncheck_ffs.c
594
if (pledge("stdio", NULL) == -1)
sbin/newfs/newfs.c
432
if (pledge("stdio disklabel tty", NULL) == -1)
sbin/newfs_ext2fs/newfs_ext2fs.c
132
if (pledge("stdio rpath wpath cpath disklabel", NULL) == -1)
sbin/newfs_msdos/newfs_msdos.c
254
if (pledge("stdio rpath wpath disklabel", NULL) == -1)
sbin/nologin/nologin.c
50
if (pledge("stdio rpath", NULL) == -1)
sbin/pdisk/pdisk.c
116
if (pledge("stdio", NULL) == -1)
sbin/pflogd/pflogd.c
685
if (pledge("stdio recvfd", NULL) == -1)
sbin/pflogd/privsep.c
151
BROKEN if (pledge("stdio rpath wpath cpath sendfd proc bpf", NULL) == -1)
sbin/ping/ping.c
771
if (pledge("stdio inet dns", NULL) == -1)
sbin/ping/ping.c
774
if (pledge("stdio inet", NULL) == -1)
sbin/resolvd/resolvd.c
233
if (pledge("stdio unix rpath wpath cpath", NULL) == -1)
sbin/route/route.c
270
if (pledge("stdio dns route", NULL) == -1)
sbin/route/route.c
287
if (pledge("stdio dns", NULL) == -1)
sbin/route/route.c
378
if (pledge("stdio dns", NULL) == -1)
sbin/route/show.c
154
if (pledge("stdio", NULL) == -1)
sbin/route/show.c
211
if (pledge("stdio dns", NULL) == -1)
sbin/savecore/savecore.c
185
if (pledge("stdio rpath wpath cpath", NULL) == -1) {
sbin/savecore/savecore.c
380
if (pledge("stdio", NULL) == -1) {
sbin/scan_ffs/scan_ffs.c
146
if (pledge("stdio rpath disklabel", NULL) == -1)
sbin/scan_ffs/scan_ffs.c
184
if (pledge("stdio", NULL) == -1)
sbin/shutdown/shutdown.c
187
if (pledge("stdio rpath wpath cpath getpw tty id proc exec", NULL) == -1)
sbin/shutdown/shutdown.c
409
if (pledge("stdio rpath wpath cpath tty id proc exec", NULL) == -1)
sbin/shutdown/shutdown.c
431
if (pledge("stdio exec", NULL) == -1)
sbin/slaacd/engine.c
382
if (pledge("stdio recvfd", NULL) == -1)
sbin/slaacd/engine.c
688
if (pledge("stdio", NULL) == -1)
sbin/slaacd/frontend.c
166
if (pledge("stdio unix recvfd route", NULL) == -1)
sbin/slaacd/slaacd.c
285
if (pledge("stdio inet sendfd wroute", NULL) == -1)
sbin/tunefs/tunefs.c
159
if (pledge("stdio", NULL) == -1)
sbin/unwind/frontend.c
221
if (pledge("stdio dns unix recvfd", NULL) == -1)
sbin/unwind/resolver.c
401
if (pledge("stdio inet dns rpath recvfd", NULL) == -1)
sbin/unwind/resolver.c
691
if (pledge("stdio inet dns rpath", NULL) == -1)
sbin/unwind/unwind.c
300
if (pledge("stdio rpath sendfd", NULL) == -1)
sys/kern/kern_pledge.c
1062
uint64_t pledge;
sys/kern/kern_pledge.c
1066
pledge = p->p_pledge;
sys/kern/kern_pledge.c
1086
if ((pledge & PLEDGE_INET)) {
sys/kern/kern_pledge.c
1097
if ((pledge & PLEDGE_BPF)) {
sys/kern/kern_pledge.c
1110
if ((pledge & PLEDGE_TAPE)) {
sys/kern/kern_pledge.c
1127
if ((pledge & PLEDGE_DRM)) {
sys/kern/kern_pledge.c
1139
if ((pledge & PLEDGE_AUDIO)) {
sys/kern/kern_pledge.c
1158
if ((pledge & PLEDGE_DISKLABEL)) {
sys/kern/kern_pledge.c
1186
if ((pledge & PLEDGE_VIDEO)) {
sys/kern/kern_pledge.c
1228
if ((pledge & PLEDGE_PF)) {
sys/kern/kern_pledge.c
1251
if ((pledge & PLEDGE_TTY)) {
sys/kern/kern_pledge.c
1255
if ((pledge & PLEDGE_RPATH) == 0)
sys/kern/kern_pledge.c
1257
if ((pledge & PLEDGE_WPATH) == 0)
sys/kern/kern_pledge.c
1265
if ((pledge & PLEDGE_RPATH) == 0)
sys/kern/kern_pledge.c
1267
if ((pledge & PLEDGE_WPATH) == 0)
sys/kern/kern_pledge.c
1276
if ((pledge & PLEDGE_PROC) == 0)
sys/kern/kern_pledge.c
1305
if ((pledge & PLEDGE_ROUTE)) {
sys/kern/kern_pledge.c
1327
if ((pledge & PLEDGE_WROUTE)) {
sys/kern/kern_pledge.c
1344
if ((pledge & PLEDGE_VMM)) {
sys/kern/kern_pledge.c
1356
if ((pledge & PLEDGE_VMM)) {
sys/kern/kern_pledge.c
1373
uint64_t pledge;
sys/kern/kern_pledge.c
1377
pledge = p->p_pledge;
sys/kern/kern_pledge.c
1408
if ((pledge & PLEDGE_WROUTE)) {
sys/kern/kern_pledge.c
1418
if ((pledge & (PLEDGE_INET|PLEDGE_UNIX|PLEDGE_DNS)) == 0)
sys/kern/kern_pledge.c
1431
if ((pledge & PLEDGE_DNS)) {
sys/kern/kern_pledge.c
1442
if ((pledge & (PLEDGE_INET|PLEDGE_UNIX)) == 0)
sys/kern/kern_pledge.c
1453
if ((pledge & PLEDGE_INET) == 0)
sys/kern/kern_pledge.c
1484
if (pledge & PLEDGE_MCAST)
sys/kern/kern_pledge.c
1508
if (pledge & PLEDGE_MCAST)
sys/kern/kern_pledge.c
1522
uint64_t pledge;
sys/kern/kern_pledge.c
1526
pledge = p->p_pledge;
sys/kern/kern_pledge.c
1529
if (ISSET(pledge, PLEDGE_DNS))
sys/kern/kern_pledge.c
1539
if (ISSET(pledge, PLEDGE_INET))
sys/kern/kern_pledge.c
1544
if (ISSET(pledge, PLEDGE_UNIX))
sys/kern/kern_pledge.c
823
uint64_t pledge;
sys/kern/kern_pledge.c
827
pledge = p->p_pledge;
sys/kern/kern_pledge.c
833
if ((pledge & PLEDGE_ROUTE)) {
sys/kern/kern_pledge.c
855
if (pledge & (PLEDGE_PS | PLEDGE_VMINFO)) {
sys/kern/kern_pledge.c
876
if ((pledge & PLEDGE_PS)) {
sys/kern/kern_pledge.c
895
if ((pledge & PLEDGE_VMINFO)) {
sys/kern/kern_pledge.c
908
if ((pledge & (PLEDGE_INET | PLEDGE_UNIX))) {
sys/kern/kern_pledge.c
914
if ((pledge & (PLEDGE_ROUTE | PLEDGE_INET | PLEDGE_DNS))) {
sys/kern/kern_pledge.c
923
if ((pledge & PLEDGE_DISKLABEL)) {
usr.bin/apply/apply.c
89
if (pledge("stdio proc exec", NULL) == -1)
usr.bin/at/at.c
1005
if (pledge("stdio rpath getpw", NULL) == -1)
usr.bin/at/at.c
1010
if (pledge("stdio rpath cpath getpw unix", NULL) == -1)
usr.bin/at/at.c
876
if (pledge("stdio rpath wpath cpath fattr getpw unix id", NULL) == -1)
usr.bin/at/at.c
998
if (pledge("stdio rpath wpath cpath fattr getpw unix", NULL)
usr.bin/aucat/aucat.c
1083
if (pledge("stdio audio", NULL) == -1)
usr.bin/aucat/aucat.c
1330
if (pledge("stdio rpath wpath cpath inet unix dns audio", NULL) == -1)
usr.bin/aucat/aucat.c
971
if (pledge("stdio", NULL) == -1)
usr.bin/awk/main.c
254
if (pledge("stdio rpath wpath", NULL) == -1) {
usr.bin/awk/main.c
260
if (pledge("stdio rpath wpath cpath proc exec", NULL) == -1) {
usr.bin/banner/banner.c
151
if (pledge("stdio", NULL) == -1)
usr.bin/basename/basename.c
48
if (pledge("stdio", NULL) == -1)
usr.bin/bc/bc.y
1103
if (pledge("stdio rpath proc tty", NULL) == -1)
usr.bin/bc/bc.y
1160
if (pledge("stdio", NULL) == -1)
usr.bin/bc/bc.y
1185
if (pledge("stdio rpath tty", NULL) == -1)
usr.bin/bgplg/bgplg.c
255
if (pledge("stdio rpath proc exec", NULL) == -1)
usr.bin/biff/biff.c
65
if (pledge("stdio rpath fattr", NULL) == -1)
usr.bin/cal/cal.c
153
if (pledge("stdio", NULL) == -1)
usr.bin/calendar/calendar.c
139
if (pledge("stdio rpath wpath cpath fattr getpw id proc exec",
usr.bin/calendar/calendar.c
143
if (pledge("stdio rpath proc exec", NULL) == -1)
usr.bin/cap_mkdb/cap_mkdb.c
78
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/chpass/chpass.c
144
if (pledge("stdio rpath wpath cpath id proc exec unveil",
usr.bin/chpass/chpass.c
168
if (pledge("stdio rpath wpath cpath id proc exec unveil",
usr.bin/chpass/chpass.c
191
if (pledge("stdio rpath wpath cpath proc exec", NULL) == -1)
usr.bin/cmp/cmp.c
101
if (pledge("stdio", NULL) == -1)
usr.bin/cmp/cmp.c
60
if (pledge("stdio rpath", NULL) == -1)
usr.bin/col/col.c
116
if (pledge("stdio", NULL) == -1)
usr.bin/colrm/colrm.c
60
if (pledge("stdio", NULL) == -1)
usr.bin/column/column.c
135
if (pledge("stdio", NULL) == -1)
usr.bin/column/column.c
87
if (pledge("stdio rpath", NULL) == -1)
usr.bin/comm/comm.c
64
if (pledge("stdio rpath", NULL) == -1)
usr.bin/compress/main.c
180
if (pledge("stdio rpath wpath cpath fattr chown", NULL) == -1)
usr.bin/compress/main.c
348
if (pledge("stdio rpath", NULL) == -1)
usr.bin/csplit/csplit.c
103
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/ctags/ctags.c
80
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/ctfconv/ctfconv.c
137
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/ctfconv/ctfconv.c
145
if (pledge("stdio wpath cpath", NULL) == -1)
usr.bin/ctfconv/ctfconv.c
154
if (pledge("stdio", NULL) == -1)
usr.bin/ctfdump/ctfdump.c
77
if (pledge("stdio rpath", NULL) == -1)
usr.bin/cu/cu.c
118
if (pledge("stdio rpath wpath tty", NULL) == -1)
usr.bin/cu/cu.c
194
if (restricted && pledge("stdio tty", NULL) == -1)
usr.bin/cu/cu.c
91
if (pledge("stdio rpath wpath cpath getpw proc exec tty",
usr.bin/cut/cut.c
144
if (pledge("stdio", NULL) == -1)
usr.bin/cut/cut.c
72
if (pledge("stdio rpath", NULL) == -1)
usr.bin/cvs/cvs.c
192
if (pledge("stdio rpath wpath cpath fattr getpw proc exec", NULL) == -1)
usr.bin/dc/dc.c
75
if (pledge("stdio", NULL) == -1)
usr.bin/dc/dc.c
98
if (pledge("stdio", NULL) == -1)
usr.bin/dc/main.c
30
if (pledge("stdio rpath", NULL) == -1)
usr.bin/deroff/deroff.c
264
if (pledge("stdio rpath", NULL) == -1)
usr.bin/diff/diff.c
218
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/diff3/diff3prog.c
148
if (pledge("stdio rpath", NULL) == -1)
usr.bin/dig/dig.c
1892
if (pledge("stdio rpath inet dns", NULL) == -1) {
usr.bin/dig/dig.c
1926
if (pledge("stdio inet dns", NULL) == -1) {
usr.bin/dig/host.c
837
if (pledge("stdio rpath inet dns", NULL) == -1) {
usr.bin/dig/nslookup.c
914
if (pledge("stdio rpath inet dns", NULL) == -1) {
usr.bin/dirname/dirname.c
33
if (pledge("stdio", NULL) == -1)
usr.bin/doas/doas.c
189
if (pledge("stdio rpath getpw", NULL) == -1)
usr.bin/doas/doas.c
396
if (pledge("stdio rpath getpw id", NULL) == -1)
usr.bin/doas/doas.c
451
if (pledge("stdio rpath getpw exec id", NULL) == -1)
usr.bin/doas/doas.c
466
if (pledge("stdio rpath exec", NULL) == -1)
usr.bin/doas/doas.c
474
if (pledge("stdio exec", NULL) == -1)
usr.bin/du/du.c
69
if (pledge("stdio rpath", NULL) == -1)
usr.bin/encrypt/encrypt.c
104
if (pledge("stdio rpath tty", NULL) == -1)
usr.bin/env/env.c
49
if (pledge("stdio exec", NULL) == -1)
usr.bin/expand/expand.c
54
if (pledge("stdio rpath", NULL) == -1)
usr.bin/file/file.c
171
if (pledge("stdio rpath getpw recvfd sendfd id proc", NULL) == -1)
usr.bin/file/file.c
210
if (pledge("stdio rpath sendfd", NULL) == -1)
usr.bin/file/file.c
375
if (pledge("stdio getpw recvfd id", NULL) == -1)
usr.bin/file/file.c
390
if (pledge("stdio recvfd", NULL) == -1)
usr.bin/find/find.c
160
if (pledge("stdio rpath cpath getpw", NULL) == -1)
usr.bin/find/find.c
163
if (pledge("stdio rpath getpw", NULL) == -1)
usr.bin/find/find.c
168
if (pledge("stdio rpath cpath getpw proc exec", NULL)
usr.bin/find/find.c
172
if (pledge("stdio rpath getpw proc exec", NULL) == -1)
usr.bin/finger/finger.c
127
if (pledge("stdio rpath getpw dns inet", NULL) == -1)
usr.bin/finger/finger.c
137
if (pledge("stdio rpath getpw", NULL) == -1)
usr.bin/finger/finger.c
223
if (pledge("stdio rpath getpw", NULL) == -1)
usr.bin/fmt/fmt.c
263
if (pledge("stdio rpath", NULL) == -1)
usr.bin/fmt/fmt.c
347
if (pledge("stdio", NULL) == -1)
usr.bin/fold/fold.c
111
if (pledge("stdio", NULL) == -1)
usr.bin/fold/fold.c
64
if (pledge("stdio rpath", NULL) == -1)
usr.bin/from/from.c
77
if (pledge("stdio unveil rpath getpw", NULL) == -1)
usr.bin/from/from.c
84
if (pledge("stdio rpath", NULL) == -1)
usr.bin/from/from.c
93
if (pledge("stdio", NULL) == -1)
usr.bin/fstat/fstat.c
302
if (pledge("stdio rpath getpw proc", NULL) == -1)
usr.bin/fstat/fstat.c
305
if (pledge("stdio rpath getpw", NULL) == -1)
usr.bin/fstat/fstat.c
308
if (pledge("stdio rpath proc", NULL) == -1)
usr.bin/fstat/fstat.c
311
if (pledge("stdio rpath", NULL) == -1)
usr.bin/fstat/fstat.c
316
if (pledge("stdio rpath getpw", NULL) == -1)
usr.bin/ftp/fetch.c
1030
if (pledge("stdio tty", NULL) == -1)
usr.bin/ftp/fetch.c
680
if (pledge("stdio rpath inet dns tty", NULL) == -1)
usr.bin/ftp/fetch.c
683
if (pledge("stdio rpath wpath cpath inet dns tty", NULL) == -1)
usr.bin/ftp/main.c
613
if (pledge("stdio rpath dns tty inet",
usr.bin/ftp/main.c
619
if (pledge("stdio rpath wpath cpath dns tty inet proc exec fattr",
usr.bin/ftp/main.c
624
if (pledge("stdio rpath wpath cpath dns tty inet fattr",
usr.bin/gencat/gencat.c
137
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/getcap/getcap.c
43
if (pledge("stdio rpath", NULL) == -1)
usr.bin/getconf/getconf.c
477
if (pledge("stdio", NULL) == -1)
usr.bin/getconf/getconf.c
483
if (pledge("stdio", NULL) == -1)
usr.bin/getconf/getconf.c
501
if (pledge("stdio ps vminfo", NULL) == -1)
usr.bin/getconf/getconf.c
517
if (pledge("stdio rpath", NULL) == -1)
usr.bin/getent/getent.c
106
if (pledge(curdb->pledge, NULL) == -1)
usr.bin/getent/getent.c
78
const char *pledge;
usr.bin/getopt/getopt.c
21
if (pledge("stdio", NULL) == -1)
usr.bin/gprof/gprof.c
172
if (pledge("stdio rpath", NULL) == -1)
usr.bin/gprof/gprof.c
84
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/grep/grep.c
256
if (pledge("stdio rpath", NULL) == -1)
usr.bin/head/head.c
57
if (pledge("stdio rpath", NULL) == -1)
usr.bin/head/head.c
84
if (pledge("stdio", NULL) == -1)
usr.bin/hexdump/hexdump.c
55
if (pledge("stdio rpath", NULL) == -1)
usr.bin/htpasswd/htpasswd.c
109
if (pledge("stdio tty", NULL) == -1)
usr.bin/htpasswd/htpasswd.c
81
if (pledge("stdio rpath wpath cpath flock tty", NULL) == -1)
usr.bin/htpasswd/htpasswd.c
89
else if (pledge("stdio", NULL) == -1)
usr.bin/id/id.c
64
if (pledge("stdio getpw", NULL) == -1)
usr.bin/indent/indent.c
205
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/infocmp/infocmp.c
1548
if (pledge("stdio rpath", NULL) == -1) {
usr.bin/join/join.c
108
if (pledge("stdio rpath", NULL) == -1)
usr.bin/join/join.c
216
if (pledge("stdio", NULL) == -1)
usr.bin/jot/jot.c
91
if (pledge("stdio", NULL) == -1)
usr.bin/kdump/kdump.c
1470
ktrpledge(struct ktr_pledge *pledge, size_t len)
usr.bin/kdump/kdump.c
1478
if (pledge->syscall >= SYS_MAXSYSCALL || pledge->syscall < 0)
usr.bin/kdump/kdump.c
1479
(void)printf("[%d]", pledge->syscall);
usr.bin/kdump/kdump.c
1481
(void)printf("%s", syscallnames[pledge->syscall]);
usr.bin/kdump/kdump.c
1483
for (i = 0; pledge->code && pledgenames[i].bits != 0; i++) {
usr.bin/kdump/kdump.c
1484
if (pledgenames[i].bits & pledge->code) {
usr.bin/kdump/kdump.c
1490
(void)printf(", errno %d", pledge->error);
usr.bin/kdump/kdump.c
1492
(void)printf(" %s", strerror(pledge->error));
usr.bin/kdump/kdump.c
243
if (pledge("stdio rpath getpw", NULL) == -1)
usr.bin/lam/lam.c
82
if (pledge("stdio rpath", NULL) == -1)
usr.bin/lam/lam.c
89
if (pledge("stdio", NULL) == -1)
usr.bin/last/last.c
157
if (pledge("stdio rpath", NULL) == -1)
usr.bin/lastcomm/lastcomm.c
71
if (pledge("stdio rpath getpw", NULL) == -1)
usr.bin/ldap/ldapclient.c
120
if (pledge("stdio inet unix tty rpath dns", NULL) == -1)
usr.bin/ldap/ldapclient.c
266
if (pledge("stdio inet unix rpath dns", NULL) == -1)
usr.bin/ldap/ldapclient.c
282
if (pledge("stdio", NULL) == -1)
usr.bin/leave/leave.c
67
if (pledge("stdio proc", NULL) == -1)
usr.bin/less/lesskey.c
728
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/less/main.c
227
if (pledge("stdio rpath tty", NULL) == -1) {
usr.bin/less/main.c
93
if (pledge("stdio rpath tty", NULL) == -1) {
usr.bin/less/main.c
98
if (pledge("stdio rpath wpath cpath fattr proc exec tty", NULL) == -1) {
usr.bin/lex/main.c
214
if (pledge("stdio rpath wpath cpath proc exec", NULL) == -1) {
usr.bin/lndir/lndir.c
88
if (pledge("stdio rpath cpath", NULL) == -1)
usr.bin/locale/locale.c
184
if (pledge("stdio", NULL) == -1)
usr.bin/locate/bigram/locate.bigram.c
62
if (pledge("stdio", NULL) == -1)
usr.bin/locate/code/locate.code.c
120
if (pledge("stdio rpath", NULL) == -1)
usr.bin/locate/code/locate.code.c
137
if (pledge("stdio", NULL) == -1)
usr.bin/locate/locate/locate.c
119
if (pledge("stdio rpath", NULL) == -1)
usr.bin/lock/lock.c
85
if (pledge("stdio rpath wpath getpw tty proc exec", NULL) == -1)
usr.bin/logger/logger.c
98
if (pledge("stdio", NULL) == -1)
usr.bin/logname/logname.c
51
if (pledge("stdio", NULL) == -1)
usr.bin/look/look.c
123
if (pledge("stdio", NULL) == -1)
usr.bin/look/look.c
80
if (pledge("stdio rpath", NULL) == -1)
usr.bin/m4/main.c
174
if (pledge("stdio rpath wpath cpath proc exec", NULL) == -1)
usr.bin/mail/main.c
111
if (pledge("stdio rpath wpath cpath getpw fattr tty flock proc exec",
usr.bin/make/main.c
198
if (pledge("stdio rpath wpath cpath fattr proc exec", NULL) == -1)
usr.bin/mandoc/cgi.c
1101
if (pledge("stdio rpath", NULL) == -1) {
usr.bin/mandoc/main.c
1326
if (pledge("stdio rpath wpath cpath tty proc", NULL) == -1) {
usr.bin/mandoc/main.c
387
if (pledge("stdio rpath wpath cpath tty proc exec", NULL) == -1) {
usr.bin/mandoc/main.c
403
c = pledge("stdio rpath", NULL);
usr.bin/mandoc/main.c
406
c = pledge("stdio rpath wpath cpath", NULL);
usr.bin/mandoc/main.c
408
c = pledge("stdio rpath wpath cpath tty proc exec", NULL);
usr.bin/mandoc/main.c
890
pledge("stdio rpath wpath cpath", NULL) == -1) {
usr.bin/mandoc/mandocdb.c
313
if (pledge("stdio rpath wpath cpath", NULL) == -1) {
usr.bin/mandoc/mandocdb.c
392
if (pledge("stdio rpath", NULL) == -1) {
usr.bin/mesg/mesg.c
68
if (pledge("stdio rpath fattr", NULL) == -1)
usr.bin/mg/main.c
74
if (pledge("stdio rpath wpath cpath fattr chown getpw tty proc exec",
usr.bin/midicat/midicat.c
130
if (pledge("stdio", NULL) == -1)
usr.bin/mklocale/yacc.y
256
if (pledge("stdio rpath wpath cpath", NULL) == -1) {
usr.bin/mktemp/mktemp.c
41
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/nc/netcat.c
405
if (pledge("stdio rpath wpath cpath unix", NULL) == -1)
usr.bin/nc/netcat.c
408
if (pledge("stdio inet dns sendfd tty", NULL) == -1)
usr.bin/nc/netcat.c
411
if (pledge("stdio inet dns sendfd", NULL) == -1)
usr.bin/nc/netcat.c
414
if (pledge("stdio rpath inet dns tty", NULL) == -1)
usr.bin/nc/netcat.c
417
if (pledge("stdio inet dns tty", NULL) == -1)
usr.bin/nc/netcat.c
420
if (pledge("stdio rpath inet dns", NULL) == -1)
usr.bin/nc/netcat.c
422
} else if (pledge("stdio inet dns", NULL) == -1)
usr.bin/nc/netcat.c
556
if (pledge("stdio inet dns tty", NULL) == -1)
usr.bin/nc/netcat.c
558
} else if (pledge("stdio inet dns", NULL) == -1)
usr.bin/nc/netcat.c
590
if (pledge("stdio unix", NULL) == -1)
usr.bin/nc/netcat.c
620
if (pledge("stdio unix", NULL) == -1)
usr.bin/nice/nice.c
53
if (pledge("stdio exec proc", NULL) == -1)
usr.bin/nice/nice.c
90
if (pledge("stdio exec", NULL) == -1)
usr.bin/nl/nl.c
121
if (pledge("stdio rpath", NULL) == -1)
usr.bin/nl/nl.c
220
if (pledge("stdio", NULL) == -1)
usr.bin/nm/nm.c
137
if (pledge("stdio rpath proc exec", NULL) == -1)
usr.bin/nm/nm.c
143
if (pledge("stdio rpath", NULL) == -1)
usr.bin/nm/nm.c
219
if (pledge("stdio rpath", NULL) == -1)
usr.bin/nohup/nohup.c
75
if (pledge("stdio rpath wpath cpath exec", NULL) == -1)
usr.bin/nohup/nohup.c
84
if (pledge("stdio exec", NULL) == -1)
usr.bin/openssl/asn1pars.c
247
if (pledge("stdio cpath wpath rpath", NULL) == -1) {
usr.bin/openssl/ca.c
640
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/certhash.c
652
if (pledge("stdio cpath wpath rpath", NULL) == -1) {
usr.bin/openssl/ciphers.c
102
if (pledge("stdio rpath", NULL) == -1) {
usr.bin/openssl/cms.c
1178
if (pledge("stdio rpath wpath cpath tty", NULL) == -1) {
usr.bin/openssl/crl.c
233
if (pledge("stdio cpath wpath rpath", NULL) == -1) {
usr.bin/openssl/crl2p7.c
172
if (pledge("stdio cpath wpath rpath", NULL) == -1) {
usr.bin/openssl/dgst.c
338
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/dh.c
154
if (pledge("stdio cpath wpath rpath", NULL) == -1) {
usr.bin/openssl/dhparam.c
240
if (pledge("stdio cpath wpath rpath", NULL) == -1) {
usr.bin/openssl/dsa.c
239
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/dsaparam.c
165
if (pledge("stdio cpath wpath rpath", NULL) == -1) {
usr.bin/openssl/ec.c
270
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/ecparam.c
249
if (pledge("stdio cpath wpath rpath", NULL) == -1) {
usr.bin/openssl/enc.c
347
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/errstr.c
90
if (pledge("stdio rpath", NULL) == -1) {
usr.bin/openssl/gendh.c
137
if (pledge("stdio cpath wpath rpath", NULL) == -1) {
usr.bin/openssl/gendsa.c
233
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/genpkey.c
227
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/genrsa.c
284
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/ocsp.c
805
if (pledge("stdio cpath wpath rpath inet dns tty", NULL) == -1) {
usr.bin/openssl/openssl.c
378
if (pledge("stdio cpath wpath rpath inet dns proc flock tty", NULL) == -1) {
usr.bin/openssl/passwd.c
148
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/pkcs12.c
525
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/pkcs7.c
157
if (pledge("stdio cpath wpath rpath", NULL) == -1) {
usr.bin/openssl/pkcs8.c
205
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/pkey.c
210
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/pkeyparam.c
120
if (pledge("stdio cpath wpath rpath", NULL) == -1) {
usr.bin/openssl/pkeyutl.c
266
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/prime.c
121
if (pledge("stdio rpath", NULL) == -1) {
usr.bin/openssl/rand.c
112
if (pledge("stdio cpath wpath rpath", NULL) == -1) {
usr.bin/openssl/req.c
566
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/rsa.c
257
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/rsautl.c
247
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/s_client.c
888
if (pledge("stdio cpath wpath rpath inet dns tty", NULL) == -1) {
usr.bin/openssl/s_server.c
1023
if (pledge("stdio rpath inet dns tty", NULL) == -1) {
usr.bin/openssl/s_time.c
237
if (pledge("stdio rpath inet dns", NULL) == -1) {
usr.bin/openssl/sess_id.c
160
if (pledge("stdio cpath wpath rpath", NULL) == -1) {
usr.bin/openssl/smime.c
724
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/speed.c
1117
if (pledge("stdio proc", NULL) == -1) {
usr.bin/openssl/ts.c
380
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/openssl/verify.c
271
if (pledge("stdio rpath", NULL) == -1) {
usr.bin/openssl/version.c
215
if (pledge("stdio", NULL) == -1) {
usr.bin/openssl/x509.c
795
if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
usr.bin/passwd/local_passwd.c
114
if (pledge("stdio rpath wpath cpath getpw id proc exec", NULL) == -1)
usr.bin/passwd/local_passwd.c
138
if (pledge("stdio rpath wpath cpath proc exec", NULL) == -1)
usr.bin/passwd/local_passwd.c
91
if (pledge("stdio rpath wpath cpath getpw tty id proc exec", NULL) == -1)
usr.bin/passwd/pwd_check.c
141
if (pledge("stdio", NULL) == -1)
usr.bin/passwd/pwd_check.c
161
if (pledge("stdio exec", NULL) == -1)
usr.bin/paste/paste.c
60
if (pledge("stdio rpath", NULL) == -1)
usr.bin/patch/patch.c
155
if (pledge("stdio rpath wpath cpath fattr unveil", NULL) == -1) {
usr.bin/patch/patch.c
255
if (pledge("stdio rpath wpath cpath fattr", NULL) == -1) {
usr.bin/pkgconf/libpkgconf/bsdstubs.c
188
return pledge(promises, execpromises);
usr.bin/pkill/pkill.c
275
if (pledge("stdio proc", NULL) == -1)
usr.bin/pkill/pkill.c
278
if (pledge("stdio", NULL) == -1)
usr.bin/pr/pr.c
142
if (pledge("stdio rpath", NULL) == -1) {
usr.bin/printenv/printenv.c
51
if (pledge("stdio", NULL) == -1)
usr.bin/printf/printf.c
82
if (pledge("stdio", NULL) == -1)
usr.bin/rcs/rcsprog.c
131
if (pledge("stdio rpath wpath cpath fattr flock getpw", NULL) == -1)
usr.bin/readlink/readlink.c
47
if (pledge("stdio rpath", NULL) == -1)
usr.bin/realpath/realpath.c
37
if (pledge("stdio rpath", NULL) == -1)
usr.bin/renice/renice.c
58
if (pledge("stdio getpw proc", NULL) == -1)
usr.bin/rev/rev.c
57
if (pledge("stdio rpath", NULL) == -1)
usr.bin/rev/rev.c
71
if (pledge("stdio", NULL) == -1)
usr.bin/rpcgen/rpc_main.c
141
if (pledge("stdio rpath wpath cpath proc exec", NULL) == -1) {
usr.bin/rpcinfo/rpcinfo.c
104
if (pledge("stdio inet dns rpath", NULL) == -1)
usr.bin/rs/rs.c
105
if (pledge("stdio", NULL) == -1)
usr.bin/rsync/client.c
44
if (pledge("stdio unix rpath wpath cpath dpath fattr chown getpw unveil",
usr.bin/rsync/main.c
367
if (pledge("stdio unix rpath wpath cpath dpath inet fattr chown dns getpw proc exec unveil",
usr.bin/rsync/main.c
597
if (pledge("stdio unix rpath wpath cpath dpath fattr chown getpw proc exec unveil",
usr.bin/rsync/main.c
611
if (pledge("stdio exec", NULL) == -1)
usr.bin/rsync/receiver.c
208
if (pledge("stdio unix rpath wpath cpath dpath fattr chown getpw", NULL) == -1)
usr.bin/rsync/sender.c
373
if (pledge("stdio getpw rpath", NULL) == -1) {
usr.bin/rsync/server.c
58
if (pledge("stdio unix rpath wpath cpath dpath fattr chown getpw unveil",
usr.bin/rsync/socket.c
296
if (pledge("stdio unix rpath wpath cpath dpath inet fattr chown dns getpw unveil",
usr.bin/rsync/socket.c
320
if (pledge("stdio unix rpath wpath cpath dpath fattr chown getpw inet unveil",
usr.bin/rsync/socket.c
342
if (pledge("stdio unix rpath wpath cpath dpath fattr chown getpw unveil",
usr.bin/rsync/socket.c
380
if (pledge("stdio unix rpath wpath cpath dpath fattr chown getpw unveil",
usr.bin/script/script.c
180
if (pledge("stdio proc tty", NULL) == -1)
usr.bin/script/script.c
264
if (pledge("stdio proc", NULL) == -1)
usr.bin/sdiff/sdiff.c
276
if (pledge("stdio rpath wpath cpath proc exec", NULL) == -1)
usr.bin/sed/main.c
169
if (pledge("stdio rpath wpath cpath fattr chown", NULL) == -1)
usr.bin/sed/main.c
172
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/sed/main.c
187
if (pledge("stdio rpath", NULL) == -1)
usr.bin/sed/main.c
194
if (pledge("stdio", NULL) == -1)
usr.bin/sed/main.c
197
if (pledge("stdio rpath", NULL) == -1)
usr.bin/sed/main.c
200
if (pledge("stdio wpath cpath", NULL) == -1)
usr.bin/sendbug/sendbug.c
89
if (pledge("stdio rpath wpath cpath getpw proc exec", NULL) == -1)
usr.bin/seq/seq.c
101
if (pledge("stdio", NULL) == -1)
usr.bin/showmount/showmount.c
106
if (pledge("stdio rpath inet dns", NULL) == -1)
usr.bin/showmount/showmount.c
162
if (pledge("stdio rpath", NULL) == -1)
usr.bin/signify/signify.c
773
if (pledge("stdio rpath wpath cpath tty", NULL) == -1)
usr.bin/signify/signify.c
846
if (pledge("stdio rpath", NULL) == -1)
usr.bin/signify/signify.c
895
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/signify/signify.c
898
if (pledge("stdio rpath", NULL) == -1)
usr.bin/signify/signify.c
911
if (pledge("stdio", NULL) == -1)
usr.bin/skey/skey.c
46
if (pledge("stdio tty", NULL) == -1)
usr.bin/skeyaudit/skeyaudit.c
103
if (pledge("stdio rpath wpath flock getpw", NULL) == -1)
usr.bin/skeyaudit/skeyaudit.c
74
if (pledge("stdio rpath wpath flock getpw proc exec id", NULL) == -1)
usr.bin/skeyinfo/skeyinfo.c
45
if (pledge("stdio rpath wpath flock getpw", NULL) == -1)
usr.bin/skeyinit/skeyinit.c
119
if (pledge("stdio rpath wpath cpath fattr flock tty proc exec "
usr.bin/skeyinit/skeyinit.c
136
if (pledge("stdio rpath wpath cpath fattr flock tty getpw id",
usr.bin/skeyinit/skeyinit.c
156
if (pledge("stdio rpath wpath cpath fattr flock tty", NULL)
usr.bin/skeyinit/skeyinit.c
193
if (pledge("stdio rpath wpath cpath fattr flock tty", NULL) == -1)
usr.bin/sndioctl/sndioctl.c
1025
if (pledge("stdio audio", NULL) == -1) {
usr.bin/sndiod/sndiod.c
485
if (pledge("stdio sendfd rpath wpath", NULL) == -1)
usr.bin/sndiod/sndiod.c
761
if (pledge("stdio audio recvfd unix inet", NULL) == -1)
usr.bin/sndiod/sndiod.c
764
if (pledge("stdio audio recvfd unix", NULL) == -1)
usr.bin/snmp/snmpc.c
148
if (pledge("stdio inet dns unix", NULL) == -1)
usr.bin/snmp/snmpc.c
543
if (pledge("stdio", NULL) == -1)
usr.bin/snmp/snmpc.c
615
if (pledge("stdio", NULL) == -1)
usr.bin/snmp/snmpc.c
756
if (pledge("stdio", NULL) == -1)
usr.bin/snmp/snmpc.c
800
if (pledge("stdio", NULL) == -1)
usr.bin/snmp/snmpc.c
865
if (pledge("stdio", NULL) == -1)
usr.bin/sort/sort.c
1002
if (pledge("stdio", NULL) == -1)
usr.bin/sort/sort.c
1007
if (pledge("stdio rpath proc exec", NULL) == -1)
usr.bin/sort/sort.c
1010
if (pledge("stdio rpath", NULL) == -1)
usr.bin/sort/sort.c
1042
if (pledge("stdio rpath wpath cpath proc exec", NULL) == -1)
usr.bin/sort/sort.c
1045
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/sort/sort.c
804
if (pledge("stdio rpath wpath cpath fattr chown proc exec", NULL) == -1)
usr.bin/sort/sort.c
976
if (pledge("stdio rpath wpath cpath fattr chown", NULL) == -1)
usr.bin/sort/sort.c
999
if (pledge("stdio proc exec", NULL) == -1)
usr.bin/spell/spellprog.c
249
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/split/split.c
71
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/ssh/clientloop.c
1467
if (pledge("stdio rpath wpath cpath unix inet dns recvfd sendfd proc exec id tty",
usr.bin/ssh/clientloop.c
1473
if (pledge("stdio rpath wpath cpath unix inet dns proc exec tty",
usr.bin/ssh/clientloop.c
1479
if (pledge("stdio rpath wpath cpath unix inet dns proc tty",
usr.bin/ssh/clientloop.c
1486
if (pledge("stdio cpath unix inet dns proc tty", NULL) == -1)
usr.bin/ssh/clientloop.c
1491
if (pledge("stdio unix inet dns proc tty", NULL) == -1)
usr.bin/ssh/clientloop.c
956
if (pledge("stdio unix inet dns proc tty", NULL) == -1)
usr.bin/ssh/clientloop.c
961
if (pledge("stdio unix proc tty", NULL) == -1)
usr.bin/ssh/clientloop.c
965
if (pledge("stdio proc tty", NULL) == -1)
usr.bin/ssh/mux.c
2085
if (pledge("stdio proc tty", NULL) == -1)
usr.bin/ssh/mux.c
2243
if (pledge("stdio proc tty", NULL) == -1)
usr.bin/ssh/scp.c
599
if (pledge("stdio rpath wpath cpath fattr tty proc exec",
usr.bin/ssh/ssh-agent.c
2540
if (pledge("stdio rpath cpath wpath unix id proc exec", NULL) == -1)
usr.bin/ssh/ssh-keysign.c
192
if (pledge("stdio rpath getpw dns id", NULL) != 0)
usr.bin/ssh/ssh-keysign.c
223
if (pledge("stdio dns", NULL) != 0)
usr.bin/ssh/sshd-auth.c
200
if (pledge("stdio", NULL) == -1)
usr.bin/stat/stat.c
161
if (pledge("stdio rpath getpw", NULL) == -1)
usr.bin/su/su.c
237
if (pledge("stdio unveil rpath getpw exec id", NULL) == -1)
usr.bin/su/su.c
314
if (pledge("stdio rpath getpw exec id", NULL) == -1)
usr.bin/su/su.c
366
if (pledge("stdio rpath exec", NULL) == -1)
usr.bin/su/su.c
76
if (pledge("stdio unveil rpath getpw proc exec id", NULL) == -1)
usr.bin/tail/tail.c
169
if (pledge("stdio", NULL) == -1)
usr.bin/tail/tail.c
62
if (pledge("stdio rpath", NULL) == -1)
usr.bin/talk/talk.c
57
if (pledge("stdio rpath inet dns getpw tty", NULL) == -1)
usr.bin/talk/talk.c
71
if (pledge("stdio tty", NULL) == -1)
usr.bin/talk/talk.c
74
if (pledge("stdio inet tty", NULL) == -1)
usr.bin/tcpbench/tcpbench.c
1251
if (pledge("stdio unveil rpath dns inet unix id", NULL) == -1)
usr.bin/tcpbench/tcpbench.c
1277
if (pledge("stdio id dns inet unix", NULL) == -1)
usr.bin/tcpbench/tcpbench.c
1335
if (pledge("stdio id inet unix", NULL) == -1)
usr.bin/tcpbench/tcpbench.c
1347
if (pledge("stdio inet unix", NULL) == -1)
usr.bin/tcpbench/tcpbench.c
1419
if (pledge("stdio inet", NULL) == -1)
usr.bin/tee/tee.c
111
if (pledge("stdio", NULL) == -1)
usr.bin/tee/tee.c
76
if (pledge("stdio wpath cpath", NULL) == -1)
usr.bin/telnet/main.c
169
if (pledge("stdio rpath wpath getpw dns inet tty", NULL) == -1) {
usr.bin/telnet/telnet.c
1844
if (pledge("stdio rpath tty", NULL) == -1) {
usr.bin/tftp/main.c
157
if (pledge("stdio rpath wpath cpath dns inet", NULL) == -1)
usr.bin/tic/tic.c
713
if (pledge("stdio rpath wpath cpath", NULL) == -1) {
usr.bin/time/time.c
55
if (pledge("stdio proc exec", NULL) == -1)
usr.bin/timeout/timeout.c
189
if (pledge("stdio proc exec", NULL) == -1)
usr.bin/timeout/timeout.c
269
if (pledge("stdio proc", NULL) == -1)
usr.bin/tmux/client.c
315
if (pledge(
usr.bin/tmux/client.c
635
if (pledge(
usr.bin/tmux/server.c
204
if (pledge("stdio rpath wpath cpath fattr unix getpw recvfd proc exec "
usr.bin/tmux/tmux.c
465
if (pledge("stdio rpath wpath cpath flock fattr unix getpw sendfd "
usr.bin/top/top.c
433
if (pledge("stdio rpath getpw tty proc ps vminfo", NULL) == -1)
usr.bin/top/top.c
506
if (pledge("stdio getpw tty proc ps vminfo", NULL) == -1)
usr.bin/touch/touch.c
60
if (pledge("stdio rpath wpath cpath fattr", NULL) == -1)
usr.bin/tput/tput.c
390
if (pledge("stdio rpath wpath tty", NULL) == -1) {
usr.bin/tr/tr.c
91
if (pledge("stdio", NULL) == -1)
usr.bin/ts/ts.c
55
if (pledge("stdio", NULL) == -1)
usr.bin/tset/tset.c
786
if (pledge("stdio rpath wpath tty", NULL) == -1)
usr.bin/tsort/tsort.c
1000
if (pledge("stdio", NULL) == -1)
usr.bin/tsort/tsort.c
995
if (pledge("stdio rpath", NULL) == -1)
usr.bin/tty/tty.c
61
if (pledge("stdio rpath", NULL) == -1)
usr.bin/ul/ul.c
109
if (pledge("stdio rpath tty", NULL) == -1)
usr.bin/uname/uname.c
60
if (pledge("stdio", NULL) == -1)
usr.bin/unexpand/unexpand.c
53
if (pledge("stdio rpath", NULL) == -1) {
usr.bin/unifdef/unifdef.c
268
if (pledge("stdio rpath wpath cpath fattr", NULL) == -1)
usr.bin/uniq/uniq.c
118
if (pledge("stdio", NULL) == -1)
usr.bin/uniq/uniq.c
68
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/units/units.c
633
if (pledge("stdio rpath", NULL) == -1)
usr.bin/units/units.c
667
if (pledge("stdio", NULL) == -1)
usr.bin/unvis/unvis.c
46
if (pledge("stdio rpath", NULL) == -1)
usr.bin/unvis/unvis.c
68
if (pledge("stdio", NULL) == -1)
usr.bin/users/users.c
58
if (pledge("stdio rpath", NULL) == -1)
usr.bin/uudecode/uudecode.c
127
if (pledge("stdio rpath wpath cpath getpw", NULL) == -1)
usr.bin/uudecode/uudecode.c
130
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/uudecode/uudecode.c
133
if (pledge("stdio rpath", NULL) == -1)
usr.bin/uuencode/uuencode.c
101
if (pledge("stdio", NULL) == -1)
usr.bin/uuencode/uuencode.c
98
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/vi/common/main.c
225
if (pledge("stdio rpath wpath cpath fattr flock getpw tty", NULL) == -1) {
usr.bin/vi/common/main.c
72
if (pledge("stdio rpath wpath cpath fattr flock getpw tty proc exec",
usr.bin/vi/common/options_f.c
215
if (pledge("stdio rpath wpath cpath fattr flock getpw tty", NULL) == -1) {
usr.bin/vis/vis.c
121
if (pledge("stdio", NULL) == -1)
usr.bin/vis/vis.c
58
if (pledge("stdio rpath", NULL) == -1)
usr.bin/w/w.c
157
if (pledge("stdio tty rpath dns ps vminfo", NULL) == -1)
usr.bin/w/w.c
160
if (pledge("stdio tty rpath ps vminfo", NULL) == -1)
usr.bin/wall/ttymsg.c
153
if (pledge("stdio", NULL) == -1)
usr.bin/wall/wall.c
123
if (pledge("stdio rpath wpath getpw proc", NULL) == -1)
usr.bin/wall/wall.c
163
if (pledge("stdio rpath wpath proc", NULL) == -1)
usr.bin/watch/watch.c
227
if (pledge("stdio rpath tty proc exec", NULL) == -1)
usr.bin/wc/wc.c
63
if (pledge("stdio rpath", NULL) == -1)
usr.bin/what/what.c
60
if (pledge("stdio rpath", NULL) == -1)
usr.bin/which/which.c
84
if (pledge("stdio rpath", NULL) == -1)
usr.bin/who/who.c
132
if (pledge("stdio rpath getpw", NULL) == -1)
usr.bin/who/who.c
303
if (pledge("stdio getpw", NULL) == -1)
usr.bin/who/who.c
74
if (pledge("stdio unveil rpath getpw", NULL) == -1)
usr.bin/whois/whois.c
146
if (pledge("stdio dns inet", NULL) == -1)
usr.bin/write/write.c
257
if (pledge("stdio", NULL) == -1)
usr.bin/x99token/x99token.c
49
if (pledge("stdio rpath wpath cpath getpw tty", NULL) == -1)
usr.bin/xargs/xargs.c
103
if (pledge("stdio rpath proc exec", NULL) == -1)
usr.bin/yacc/main.c
286
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.bin/yes/yes.c
40
if (pledge("stdio", NULL) == -1)
usr.bin/ypcat/ypcat.c
91
if (pledge("stdio rpath inet getpw", NULL) == -1) {
usr.sbin/ac/ac.c
202
if (pledge("stdio rpath", NULL) == -1)
usr.sbin/acme-client/acctproc.c
479
if (pledge("stdio", NULL) == -1) {
usr.sbin/acme-client/certproc.c
44
if (pledge("stdio", NULL) == -1) {
usr.sbin/acme-client/chngproc.c
46
if (pledge("stdio cpath wpath", NULL) == -1) {
usr.sbin/acme-client/dnsproc.c
122
if (pledge("stdio dns", NULL) == -1) {
usr.sbin/acme-client/fileproc.c
111
if (pledge("stdio cpath wpath rpath fattr", NULL) == -1) {
usr.sbin/acme-client/keyproc.c
114
if (pledge("stdio", NULL) == -1) {
usr.sbin/acme-client/main.c
361
if (pledge("stdio", NULL) == -1)
usr.sbin/acme-client/netproc.c
745
if (pledge("stdio inet rpath", NULL) == -1) {
usr.sbin/acme-client/netproc.c
755
if (pledge("stdio inet", NULL) == -1) {
usr.sbin/acme-client/revokeproc.c
107
if (pledge("stdio", NULL) == -1) {
usr.sbin/acpidump/acpidump.c
628
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.sbin/apm/apm.c
261
if (pledge("stdio", NULL) == -1)
usr.sbin/apm/apm.c
308
if (pledge("stdio", NULL) == -1)
usr.sbin/arp/arp.c
230
if (pledge("stdio dns", NULL) == -1)
usr.sbin/bgpctl/bgpctl.c
134
if (pledge("stdio", NULL) == -1)
usr.sbin/bgpctl/bgpctl.c
160
if (pledge("stdio unix", NULL) == -1)
usr.sbin/bgpctl/bgpctl.c
174
if (pledge("stdio", NULL) == -1)
usr.sbin/bgpctl/bgpctl.c
94
if (pledge("stdio rpath wpath cpath unix inet dns", NULL) == -1)
usr.sbin/bgpd/bgpd.c
307
BROKEN if (pledge("stdio rpath wpath cpath fattr unix route recvfd sendfd",
usr.sbin/bgpd/rde.c
193
if (pledge("stdio recvfd", NULL) == -1)
usr.sbin/bgpd/rtr.c
210
if (pledge("stdio recvfd", NULL) == -1)
usr.sbin/bgpd/session.c
209
if (pledge("stdio inet recvfd", NULL) == -1)
usr.sbin/bgplgd/slowcgi.c
360
if (pledge("stdio rpath unix proc exec", NULL) == -1)
usr.sbin/bgplgd/slowcgi.c
988
if (pledge("stdio rpath exec", NULL) == -1)
usr.sbin/config/main.c
145
if (pledge("stdio rpath wpath cpath flock proc exec", NULL) == -1)
usr.sbin/config/main.c
715
if (pledge("stdio rpath wpath cpath flock", NULL) == -1)
usr.sbin/cron/cron.c
102
if (pledge("stdio rpath wpath cpath fattr getpw unix id dns proc exec",
usr.sbin/cron/crontab.c
82
if (pledge("stdio rpath wpath cpath fattr getpw unix id proc exec",
usr.sbin/crunchgen/crunchgen.c
121
if (pledge("stdio rpath wpath cpath proc exec", NULL) == -1) {
usr.sbin/dev_mkdb/dev_mkdb.c
72
if (pledge("stdio rpath wpath cpath flock", NULL) == -1)
usr.sbin/dhcp6leasectl/dhcp6leasectl.c
120
if (pledge("stdio", NULL) == -1)
usr.sbin/dhcpd/dhcpd.c
258
if (pledge("stdio inet route sendfd", NULL) == -1)
usr.sbin/dhcpd/dhcpd.c
261
if (pledge("stdio inet sendfd", NULL) == -1)
usr.sbin/dhcpleasectl/dhcpleasectl.c
154
if (pledge("stdio", NULL) == -1)
usr.sbin/dhcrelay/dhcrelay.c
303
if (pledge("stdio route", NULL) == -1)
usr.sbin/dhcrelay6/dhcrelay6.c
262
if (pledge("stdio inet route", NULL) == -1)
usr.sbin/dvmrpctl/dvmrpctl.c
98
if (pledge("stdio", NULL) == -1)
usr.sbin/eigrpctl/eigrpctl.c
119
if (pledge("stdio", NULL) == -1)
usr.sbin/eigrpd/eigrpd.c
274
if (pledge("stdio rpath inet sendfd", NULL) == -1)
usr.sbin/eigrpd/eigrpe.c
133
if (pledge("stdio inet mcast recvfd", NULL) == -1)
usr.sbin/eigrpd/rde.c
99
if (pledge("stdio recvfd", NULL) == -1)
usr.sbin/hotplugd/hotplugd.c
86
if (pledge("stdio rpath proc exec", NULL) == -1)
usr.sbin/httpd/httpd.c
228
if (pledge("stdio rpath wpath cpath inet dns sendfd", NULL) == -1)
usr.sbin/httpd/logger.c
72
if (pledge("stdio recvfd", NULL) == -1)
usr.sbin/httpd/server.c
398
if (pledge("stdio rpath inet unix recvfd", NULL) == -1)
usr.sbin/identd/identd.c
330
if (pledge("stdio getpw rpath id", NULL) == -1)
usr.sbin/identd/identd.c
364
if (pledge("stdio getpw rpath", NULL) == -1)
usr.sbin/identd/identd.c
367
if (pledge("stdio getpw", NULL) == -1)
usr.sbin/ifstated/ifstated.c
168
if (pledge("stdio rpath route proc exec", NULL) == -1)
usr.sbin/ikectl/ikectl.c
212
if (pledge("stdio proc exec rpath wpath cpath fattr tty", NULL)
usr.sbin/ikectl/ikectl.c
245
if (pledge("stdio", NULL) == -1)
usr.sbin/inetd/inetd.c
1755
if (dofork && pledge("stdio inet", NULL) == -1)
usr.sbin/inetd/inetd.c
346
if (pledge("stdio rpath cpath getpw dns inet unix proc exec id", NULL) == -1)
usr.sbin/iscsictl/iscsictl.c
115
if (pledge("stdio rpath dns", NULL) == -1)
usr.sbin/kvm_mkdb/kvm_mkdb.c
129
if (pledge("stdio rpath wpath cpath fattr flock", NULL) == -1)
usr.sbin/kvm_mkdb/kvm_mkdb.c
73
if (pledge("stdio rpath wpath cpath fattr getpw flock id unveil", NULL) == -1)
usr.sbin/kvm_mkdb/kvm_mkdb.c
92
if (pledge("stdio rpath wpath cpath fattr flock unveil", NULL) == -1)
usr.sbin/ldapctl/ldapctl.c
312
if (pledge("stdio rpath wpath cpath flock", NULL) == -1)
usr.sbin/ldapctl/ldapctl.c
335
if (pledge("stdio", NULL) == -1)
usr.sbin/ldapd/ldapd.c
253
if (pledge("stdio rpath wpath cpath getpw sendfd proc exec",
usr.sbin/ldapd/ldape.c
467
if (pledge("stdio flock inet unix recvfd", NULL) == -1)
usr.sbin/ldpctl/ldpctl.c
99
if (pledge("stdio", NULL) == -1)
usr.sbin/ldpd/lde.c
115
if (pledge("stdio recvfd", NULL) == -1)
usr.sbin/ldpd/ldpe.c
109
if (pledge("stdio inet mcast recvfd", NULL) == -1)
usr.sbin/lldp/lldp.c
224
pledge("stdio", NULL);
usr.sbin/lldpd/lldpd.c
271
if (pledge("stdio unix", NULL) == -1)
usr.sbin/lpd/control.c
85
if (pledge("stdio unix recvfd sendfd", NULL) == -1)
usr.sbin/lpd/engine.c
62
if (pledge("stdio rpath wpath cpath flock dns sendfd recvfd proc",
usr.sbin/lpd/frontend.c
96
if (pledge("stdio unix inet recvfd sendfd", NULL) == -1)
usr.sbin/lpd/lpd.c
210
if (pledge("stdio sendfd proc exec", NULL) == -1)
usr.sbin/lpd/printer.c
195
pledge("stdio rpath wpath cpath flock getpw tty proc exec",
usr.sbin/lpd/printer.c
200
pledge("stdio rpath wpath cpath inet flock dns getpw proc exec",
usr.sbin/lpd/printer.c
205
pledge("stdio rpath wpath cpath inet flock dns getpw", NULL);
usr.sbin/mailwrapper/mailwrapper.c
100
if (pledge("stdio exec", NULL) == -1)
usr.sbin/mailwrapper/mailwrapper.c
87
if (pledge("stdio rpath exec", NULL) == -1)
usr.sbin/makefs/makefs.c
204
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.sbin/mksuncd/mksuncd.c
228
if (pledge("stdio", NULL) == -1)
usr.sbin/mkuboot/mkuboot.c
236
if (pledge("stdio", NULL) == -1)
usr.sbin/mtree/mtree.c
143
if (pledge("stdio rpath cpath getpw fattr", NULL) == -1)
usr.sbin/mtree/mtree.c
146
if (pledge("stdio rpath cpath getpw", NULL) == -1)
usr.sbin/mtree/mtree.c
149
if (pledge("stdio rpath getpw fattr", NULL) == -1)
usr.sbin/mtree/mtree.c
152
if (pledge("stdio rpath getpw", NULL) == -1)
usr.sbin/ndp/ndp.c
284
if (pledge("stdio dns", NULL) == -1)
usr.sbin/netgroup_mkdb/netgroup_mkdb.c
94
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.sbin/nsd/nsd.c
1714
if (pledge("stdio rpath wpath cpath dns inet proc", NULL) == -1)
usr.sbin/nsd/server.c
508
if (pledge("stdio rpath inet", NULL) == -1) {
usr.sbin/ntpd/constraint.c
400
if (pledge("stdio inet", NULL) == -1)
usr.sbin/ntpd/ntp.c
151
if (pledge("stdio inet", NULL) == -1)
usr.sbin/ntpd/ntp_dns.c
100
if (pledge("stdio dns", NULL) == -1)
usr.sbin/ntpd/ntpd.c
288
if (pledge("stdio settime proc exec", NULL) == -1)
usr.sbin/ntpd/ntpd.c
675
if (pledge("stdio", NULL) == -1)
usr.sbin/ocspcheck/ocspcheck.c
333
if (pledge("stdio inet dns", NULL) == -1)
usr.sbin/ocspcheck/ocspcheck.c
630
if (pledge("stdio inet rpath dns", NULL) == -1)
usr.sbin/ocspcheck/ocspcheck.c
676
if (pledge("stdio", NULL) == -1)
usr.sbin/ocspcheck/ocspcheck.c
679
if (pledge("stdio rpath", NULL) == -1)
usr.sbin/ocspcheck/ocspcheck.c
710
if (pledge("stdio", NULL) == -1)
usr.sbin/ocspcheck/ocspcheck.c
713
if (pledge("stdio rpath", NULL) == -1)
usr.sbin/ospf6ctl/ospf6ctl.c
130
if (pledge("stdio", NULL) == -1)
usr.sbin/ospf6d/ospfe.c
134
if (pledge("stdio inet mcast recvfd", NULL) == -1)
usr.sbin/ospf6d/ospfe.c
419
if (pledge("stdio inet mcast", NULL) == -1)
usr.sbin/ospf6d/rde.c
158
if (pledge("stdio", NULL) == -1)
usr.sbin/ospfctl/ospfctl.c
104
if (pledge("stdio", NULL) == -1)
usr.sbin/ospfd/ospfe.c
134
if (pledge("stdio inet mcast recvfd", NULL) == -1)
usr.sbin/ospfd/ospfe.c
465
if (pledge("stdio inet mcast", NULL) == -1)
usr.sbin/ospfd/rde.c
140
if (pledge("stdio", NULL) == -1)
usr.sbin/portmap/portmap.c
250
if (pledge("stdio inet proc", NULL) == -1)
usr.sbin/portmap/portmap.c
612
if (pledge("stdio inet", NULL) == -1)
usr.sbin/pstat/pstat.c
233
if (pledge("stdio rpath vminfo", NULL) == -1)
usr.sbin/pwd_mkdb/pwd_mkdb.c
237
if (pledge("stdio rpath wpath cpath getpw fattr flock", NULL) == -1)
usr.sbin/quot/quot.c
579
if (pledge("stdio rpath getpw", NULL) == -1)
usr.sbin/ractl/ractl.c
98
if (pledge("stdio", NULL) == -1)
usr.sbin/rad/engine.c
120
if (pledge("stdio recvfd", NULL) == -1)
usr.sbin/rad/frontend.c
228
if (pledge("stdio inet unix recvfd route mcast", NULL) == -1)
usr.sbin/rad/rad.c
287
if (pledge("stdio inet rpath sendfd mcast wroute", NULL) == -1)
usr.sbin/radiusctl/radiusctl.c
118
if (pledge("stdio unix rpath dns inet", NULL) == -1)
usr.sbin/radiusctl/radiusctl.c
132
if (pledge("stdio dns inet", NULL) == -1)
usr.sbin/radiusctl/radiusctl.c
138
if (pledge("stdio unix rpath", NULL) == -1)
usr.sbin/radiusd/radiusd.c
205
if (pledge("stdio inet", NULL) == -1)
usr.sbin/radiusd/radiusd_bsdauth.c
119
if (pledge("stdio getpw rpath proc exec", NULL) == -1)
usr.sbin/radiusd/radiusd_bsdauth.c
265
if (pledge("stdio proc", NULL) == -1)
usr.sbin/radiusd/radiusd_eap2mschap.c
72
if (pledge("stdio", NULL) == -1)
usr.sbin/radiusd/radiusd_file.c
128
if (pledge("stdio rpath unveil", NULL) == -1)
usr.sbin/radiusd/radiusd_file.c
251
if (pledge("stdio", NULL) == -1)
usr.sbin/radiusd/radiusd_ipcp.c
252
if (pledge("stdio inet rpath wpath flock", NULL) == -1)
usr.sbin/radiusd/radiusd_radius.c
135
if (pledge("stdio inet", NULL) == -1)
usr.sbin/radiusd/radiusd_standard.c
104
if (pledge("stdio", NULL) == -1)
usr.sbin/rarpd/rarpd.c
347
if (pledge("stdio rpath dns", NULL) == -1)
usr.sbin/rdate/ntp.c
154
if (pledge("stdio inet", NULL) == -1)
usr.sbin/rdate/rdate.c
135
if (pledge("stdio inet dns", NULL) == -1)
usr.sbin/rdate/rdate.c
155
if (pledge("stdio rpath wpath settime", NULL) == -1)
usr.sbin/rdate/rdate.c
185
if (pledge("stdio rpath", NULL) == -1)
usr.sbin/rdsetroot/rdsetroot.c
98
if (pledge("stdio", NULL) == -1)
usr.sbin/relayctl/relayctl.c
146
if (pledge("stdio", NULL) == -1)
usr.sbin/relayd/ca.c
66
if (pledge("stdio recvfd", NULL) == -1)
usr.sbin/relayd/hce.c
73
if (pledge("stdio recvfd inet", NULL) == -1)
usr.sbin/relayd/pfe.c
88
if (pledge("stdio recvfd unix pf", NULL) == -1)
usr.sbin/relayd/relay.c
350
if (pledge("stdio recvfd inet", NULL) == -1)
usr.sbin/ripctl/ripctl.c
108
if (pledge("stdio", NULL) == -1)
usr.sbin/ripd/rde.c
110
if (pledge("stdio", NULL) == -1)
usr.sbin/ripd/ripe.c
195
if (pledge("stdio inet mcast", NULL) == -1)
usr.sbin/rmt/rmt.c
86
if (pledge("stdio rpath wpath cpath inet", NULL) == -1)
usr.sbin/route6d/route6d.c
321
if (pledge("stdio inet route mcast", NULL) == -1)
usr.sbin/rpc.bootparamd/bootparamd.c
131
if (pledge("stdio rpath dns", NULL) == -1)
usr.sbin/rpki-client/filemode.c
797
if (pledge("stdio rpath", NULL) == -1)
usr.sbin/rpki-client/http.c
2079
if (pledge("stdio rpath inet dns recvfd", NULL) == -1)
usr.sbin/rpki-client/http.c
2096
if (pledge("stdio inet dns recvfd", NULL) == -1)
usr.sbin/rpki-client/main.c
1059
if (pledge("stdio rpath wpath cpath inet fattr dns sendfd recvfd "
usr.sbin/rpki-client/main.c
1287
if (pledge("stdio rpath wpath cpath fattr sendfd unveil", NULL) == -1)
usr.sbin/rpki-client/main.c
1341
if (pledge("stdio rpath wpath cpath fattr sendfd", NULL) == -1)
usr.sbin/rpki-client/parser.c
1195
if (pledge("stdio rpath", NULL) == -1)
usr.sbin/rpki-client/rrdp.c
543
if (pledge("stdio recvfd", NULL) == -1)
usr.sbin/rpki-client/rsync.c
146
if (pledge("stdio exec", NULL) == -1)
usr.sbin/rpki-client/rsync.c
252
if (pledge("stdio rpath proc exec unveil", NULL) == -1)
usr.sbin/rpki-client/rsync.c
294
if (pledge("stdio proc exec", NULL) == -1)
usr.sbin/sa/main.c
78
if (pledge("stdio rpath wpath cpath getpw flock", NULL) == -1)
usr.sbin/sensorsd/sensorsd.c
156
if (pledge("stdio rpath proc exec", NULL) == -1)
usr.sbin/slaacctl/slaacctl.c
107
if (pledge("stdio", NULL) == -1)
usr.sbin/slaacctl/slaacctl.c
89
if (pledge("stdio unix", NULL) == -1)
usr.sbin/slowcgi/slowcgi.c
369
if (pledge("stdio rpath unix proc exec", NULL) == -1)
usr.sbin/slowcgi/slowcgi.c
915
if (pledge("stdio rpath exec", NULL) == -1)
usr.sbin/smtpd/ca.c
87
if (pledge("stdio", NULL) == -1)
usr.sbin/smtpd/control.c
247
if (pledge("stdio unix recvfd sendfd", NULL) == -1)
usr.sbin/smtpd/dispatcher.c
179
if (pledge("stdio inet unix recvfd sendfd", NULL) == -1)
usr.sbin/smtpd/enqueue.c
291
if (pledge("stdio", NULL) == -1)
usr.sbin/smtpd/enqueue.c
300
if (pledge("stdio wpath cpath", NULL) == -1)
usr.sbin/smtpd/lka.c
297
if (pledge("stdio rpath inet dns getpw recvfd sendfd",
usr.sbin/smtpd/lka.c
692
if (pledge("stdio rpath inet dns getpw recvfd sendfd proc exec", NULL) == -1)
usr.sbin/smtpd/queue.c
665
if (pledge("stdio rpath wpath cpath flock recvfd sendfd", NULL) == -1)
usr.sbin/smtpd/scheduler.c
456
if (pledge("stdio", NULL) == -1)
usr.sbin/smtpd/smtpc.c
250
if (pledge("stdio inet dns rpath wpath cpath", NULL) == -1)
usr.sbin/smtpd/smtpc.c
256
if (pledge("stdio inet dns", NULL) == -1)
usr.sbin/smtpd/smtpc.c
261
if (pledge("stdio inet", NULL) == -1)
usr.sbin/smtpd/smtpctl.c
1131
if (pledge("stdio rpath wpath cpath flock "
usr.sbin/smtpd/smtpd.c
1083
if (pledge("stdio rpath wpath cpath fattr "
usr.sbin/smtpd/spfwalk.c
104
if (pledge("dns stdio", NULL) == -1)
usr.sbin/snmpd/snmpd.c
247
if (pledge("stdio dns sendfd proc exec id", NULL) == -1)
usr.sbin/snmpd/snmpe.c
113
if (pledge("stdio recvfd inet unix", NULL) == -1)
usr.sbin/spamdb/spamdb.c
371
if (pledge("stdio", NULL) == -1)
usr.sbin/syslogc/syslogc.c
148
if (pledge("stdio", NULL) == -1)
usr.sbin/syslogd/privsep.c
207
if (pledge("stdio unveil rpath wpath cpath dns sendfd id proc exec",
usr.sbin/syslogd/privsep.c
335
if (pledge("stdio rpath wpath cpath dns sendfd id proc exec",
usr.sbin/syslogd/syslogd.c
762
if (pledge("stdio unix inet recvfd", NULL) == -1)
usr.sbin/tcpdump/privsep.c
322
if (pledge("stdio rpath dns bpf", NULL) == -1)
usr.sbin/tcpdump/tcpdump.c
520
if (pledge("stdio", NULL) == -1)
usr.sbin/tftp-proxy/tftp-proxy.c
389
if (pledge("stdio inet sendfd", NULL) == -1)
usr.sbin/tftpd/tftpd.c
398
if (pledge("stdio rpath wpath cpath fattr dns inet", NULL) == -1)
usr.sbin/tftpd/tftpd.c
401
if (pledge("stdio rpath wpath dns inet", NULL) == -1)
usr.sbin/tftpd/tftpd.c
404
if (pledge("stdio rpath dns inet", NULL) == -1)
usr.sbin/tokenadm/tokenadm.c
101
if (pledge("stdio rpath wpath cpath fattr flock getpw", NULL) == -1)
usr.sbin/tokeninit/tokeninit.c
88
if (pledge("stdio rpath wpath cpath fattr flock getpw tty", NULL) == -1)
usr.sbin/traceroute/traceroute.c
864
if (pledge("stdio inet", NULL) == -1)
usr.sbin/traceroute/traceroute.c
867
if (pledge("stdio inet dns", NULL) == -1)
usr.sbin/trpt/trpt.c
200
if (pledge("stdio", NULL) == -1)
usr.sbin/unbound/smallapp/unbound-anchor.c
2468
if (pledge("stdio rpath wpath cpath inet dns", NULL) == -1)
usr.sbin/unbound/smallapp/unbound-checkconf.c
1106
if (pledge("stdio rpath dns getpw", NULL) == -1)
usr.sbin/unbound/smallapp/unbound-checkconf.c
955
if (pledge("stdio rpath dns", NULL) == -1)
usr.sbin/unwindctl/unwindctl.c
127
if (pledge("stdio", NULL) == -1)
usr.sbin/user/user.c
1487
if (pledge("stdio rpath wpath cpath fattr flock proc exec getpw id",
usr.sbin/user/user.c
1939
if (pledge("stdio rpath wpath cpath fattr flock proc exec getpw id",
usr.sbin/user/user.c
2148
if (pledge("stdio rpath wpath cpath fattr flock proc exec getpw id",
usr.sbin/user/user.c
2209
if (pledge("stdio rpath wpath cpath fattr flock getpw", NULL) == -1)
usr.sbin/user/user.c
2257
if (pledge("stdio rpath wpath cpath fattr flock", NULL) == -1)
usr.sbin/user/user.c
2320
if (pledge("stdio rpath wpath cpath fattr flock", NULL) == -1)
usr.sbin/user/user.c
2383
if (pledge("stdio getpw", NULL) == -1)
usr.sbin/user/user.c
2445
if (pledge("stdio getpw", NULL) == -1)
usr.sbin/vipw/vipw.c
74
if (pledge("stdio rpath wpath cpath fattr proc exec", NULL) == -1)
usr.sbin/vmctl/main.c
167
if (pledge("stdio rpath exec unix getpw unveil", NULL) == -1)
usr.sbin/vmctl/main.c
580
if (pledge("stdio rpath wpath cpath", NULL) == -1)
usr.sbin/vmctl/main.c
658
if (pledge("stdio", NULL) == -1)
usr.sbin/vmctl/main.c
824
if (pledge("stdio rpath exec unix getpw unveil sendfd", NULL) == -1)
usr.sbin/vmctl/vmctl.c
89
if (pledge("stdio rpath exec unix getpw unveil", NULL) == -1)
usr.sbin/vmd/control.c
75
if (pledge("stdio unix recvfd sendfd", NULL) == -1)
usr.sbin/vmd/vioblk.c
127
if (pledge("stdio", NULL) == -1)
usr.sbin/vmd/vioblk.c
76
if (pledge("stdio vmm proc", NULL) == -1)
usr.sbin/vmd/vionet.c
122
if (pledge("stdio vmm proc", NULL) == -1)
usr.sbin/vmd/vionet.c
171
if (pledge("stdio", NULL) == -1)
usr.sbin/vmd/vioscsi.c
120
if (pledge("stdio", NULL) == -1)
usr.sbin/vmd/vioscsi.c
73
if (pledge("stdio vmm proc", NULL) == -1)
usr.sbin/vmd/vm.c
108
if (pledge("stdio vmm proc exec", NULL) == -1)
usr.sbin/vmd/vm.c
281
if (pledge("stdio vmm", NULL) == -1)
usr.sbin/vmd/vm_agentx.c
126
if (pledge("stdio unix", NULL) == -1)
usr.sbin/vmd/vmd.c
789
if (pledge("stdio rpath wpath proc tty recvfd sendfd getpw"
usr.sbin/vmd/vmm.c
97
if (pledge("stdio vmm sendfd recvfd proc exec", NULL) == -1)
usr.sbin/ypldap/ldapclient.c
376
if (pledge("stdio inet", NULL) == -1)
usr.sbin/ypldap/ypldap.c
616
if (pledge("stdio inet", NULL) == -1)
usr.sbin/ypldap/ypldap_dns.c
102
if (pledge("stdio dns", NULL) == -1)
usr.sbin/zdump/zdump.c
127
if (pledge("stdio rpath", NULL) == -1) {
usr.sbin/zic/zic.c
509
if (pledge("stdio rpath wpath cpath proc exec", NULL) == -1)