Heads up: The recent pledge(2) "tmppath" removal is being backported to #OpenBSD 7.7/7.8 in stages, starting with the base system utilities and new updated -stable packages for ports software using pledge(2), such as common web browsers.

Please run pkg_add -u before the next kernel syspatch/errata.

Goodbye pledge "tmppath", hello unveil("/tmp", "rwc") 🥳
​
Some observant #OpenBSD users may have noticed developers removing the pledge(2) "tmppath" promise from all base utilities that were using it along with a handful of ports, because this promise well, it sucks.

See Theo de Raadt's backstory:

tmppath promise removed from pledge(2) in -current www.undeadly.org/cgi?action=a... #openbsd #pledge #tmppath #development #programming #security #securesystems #freesoftware #libresoftware

Since tmppath is now removed in favor of unveiling /tmp, it will be interesting to see what can be done with symlinks in /tmp to bypass unveil permissions. In this particular case, / is unveiled with r permission and the only x required is for symlinks in a privileged directory.

tmppath promise removed from pledge(2) in -current https://www.undeadly.org/cgi?action=article;sid=20260226164038 #openbsd #pledge #tmppath #development #programming #security #securesystems #freesoftware #libresoftware