When a syscall is denied, pledge cannot reverse map the required promise.
It is not possible. Think about it for a bit.
It is best effort. It helps 95% of the developers. When you get close
to ioctl, there is no plausible way to say what promise is required.
cho...@jtan.com wrote:
> I decide
I decided late in an application's life to start using pledge, so
I put a call in at the top and started running it and adding the
requirements reported by dmesg on each iteration.
Eventually it reported that the tty promise was breached so I added
that and it reported again that the tty promise w
