about summary refs log tree commit diff
diff options
context:
space:
mode:
authorJune McEnroe <june@causal.agency>2021-06-28 11:55:07 -0400
committerJune McEnroe <june@causal.agency>2021-06-28 11:55:07 -0400
commit54251acae34fe7d72f1f93a69158fbe16cc8a30e (patch)
tree4baae64d1eedf817559c27f82a2c7fac8bae3289
parentOpenBSD: unveil the log directory specifically (diff)
downloadcatgirl-54251acae34fe7d72f1f93a69158fbe16cc8a30e.tar.gz
catgirl-54251acae34fe7d72f1f93a69158fbe16cc8a30e.zip
Move security to the features list
The restrict option now enables real sandboxing on the two main
target systems.
-rw-r--r--README.733
1 files changed, 16 insertions, 17 deletions
diff --git a/README.7 b/README.7
index e68dd95..10730ab 100644
--- a/README.7
+++ b/README.7
@@ -1,5 +1,5 @@
 .\" To view this file, run: man ./README.7
-.Dd May  4, 2021
+.Dd June 28, 2021
 .Dt README 7
 .Os "Causal Agency"
 .
@@ -45,6 +45,16 @@ is highlighted.
 Ignore:
 visibility of filtered messages
 can be toggled.
+.It
+Security:
+on
+.Fx
+and
+.Ox ,
+the
+.Cm restrict
+option enables sandboxing
+and limits filesystem access.
 .El
 .
 .Ss Non-features
@@ -98,6 +108,11 @@ provided by either
 .Lk https://git.causal.agency/libretls/about LibreTLS
 (for OpenSSL)
 or by LibreSSL.
+It targets
+.Fx ,
+.Ox ,
+macOS
+and Linux.
 .Nm
 and
 .Sy libtls
@@ -107,22 +122,6 @@ Check the Repology pages for
 and
 .Lk https://repology.org/project/libretls/versions libretls .
 .
-.Pp
-.Nm
-targets
-.Fx ,
-.Ox ,
-macOS
-and Linux.
-On
-.Ox ,
-.Xr pledge 2
-is used to limit system operations,
-and with
-.Nm Fl R ,
-.Xr unveil 2
-is used to limit filesystem access.
-.
 .Bd -literal -offset indent
 \&./configure
 make all