diff options
| author | Omar Polo <op@omarpolo.com> | 2021-01-27 10:52:11 +0000 |
|---|---|---|
| committer | Omar Polo <op@omarpolo.com> | 2021-01-27 10:52:11 +0000 |
| commit | 909ea500a4ccb227e1be09f046499d59f2898143 (patch) | |
| tree | 25dcf1a208334b04f54fdafa4aaedf6d2b1aaff0 /README.md | |
| parent | 3300cbe06a9567c66ee63f3866bcbcf3430e0205 (diff) | |
typo
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -111,8 +111,8 @@ listener process is the only one that needs internet access and is sandboxed. When a CGI script needs to be executed, the executor (outside of the sandbox) sets up a pipe and gives one end to the listener, while the other is bound to the CGI script standard output. -This way, is still possible to execute CGI scripts without restriction -even in the presence of a sandbox. +This way, is still possible to execute CGI scripts without +restrictions even in the presence of a sandbox. On OpenBSD, the listener process runs with the `stdio recvfd rpath inet` pledges and has `unveil(2)`ed only the directories that it |