sync changelog

1 files changed, 5 insertions, 0 deletions

diff --git a/ChangeLog b/ChangeLog
index 8a09d10..158208b 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2022-02-13  Omar Polo  <op@openbsd.org>
+
+	* sandbox.c (filter): tightens seccomp policy wrt openat: allow
+	only with the O_RDONLY flag.
+
 2022-02-13  Tobias Berger  <tobi.berger13@gmail.com>
 
 	* sandbox.c (filter): allow fstatat64, llseek and sigreturn;