CVSROOT: /cvs Module name: src Changes by: [email protected] 2025/01/16 05:46:03
Modified files:
sbin/nfsd : nfsd.c
Log message:
unveil nothing
nfsd can't pledge due to nfssvc(2), so use the empty-permission idiom
to hide filesystems and prevent execve; after it set up sockets and
spawned workers, all NFS work is done in the kernel.
OK millert
