ci-cargo

commit e688319cdf1c01dffe578c8ae7fdedbd37f3a78b
parent ef97d24fd55028b25236c0ef5f65f751b9a61d78
Author: Zack Newman <zack@philomathiclife.com>
Date:   Sat,  6 Jun 2026 13:27:58 -0600

fix pledge

Diffstat:
M
src/main.rs
 | 
4
++--

1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/main.rs b/src/main.rs
@@ -182,7 +182,7 @@ const fn priv_sep_final<Never>(_: &Path) -> Result<(), Never> {
     Ok(())
 }
 /// Removes read permissions to entire file system before allowing execute permissions to `cargo_path` or `ROOT`.
-/// Adds read permissions for `"/dev/null"`. Last remove `flock rpath unveil` from `pledge(2)`.
+/// Adds read permissions for `"/dev/null"`. Last remove `flock unveil` from `pledge(2)`.
 #[cfg(target_os = "openbsd")]
 fn priv_sep_final(cargo_path: &Path) -> Result<(), E> {
     Permissions::NONE
@@ -196,7 +196,7 @@ fn priv_sep_final(cargo_path: &Path) -> Result<(), E> {
             }
             .and_then(|()| Permissions::READ.unveil(c"/dev/null"))
             .map_err(E::Unveil)
-            .and_then(|()| Promises::pledge_raw(c"exec proc stdio").map_err(E::Pledge))
+            .and_then(|()| Promises::pledge_raw(c"exec proc rpath stdio").map_err(E::Pledge))
         })
 }
 /// Finds `file` in `cur_dir` or its ancestor directories returning `true` iff `file` exists. Searching is