From 909ea500a4ccb227e1be09f046499d59f2898143 Mon Sep 17 00:00:00 2001 From: Omar Polo Date: Wed, 27 Jan 2021 10:52:11 +0000 Subject: [PATCH] typo --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index f5087fa..abb16a5 100644 --- a/README.md +++ b/README.md @@ -111,8 +111,8 @@ listener process is the only one that needs internet access and is sandboxed. When a CGI script needs to be executed, the executor (outside of the sandbox) sets up a pipe and gives one end to the listener, while the other is bound to the CGI script standard output. -This way, is still possible to execute CGI scripts without restriction -even in the presence of a sandbox. +This way, is still possible to execute CGI scripts without +restrictions even in the presence of a sandbox. On OpenBSD, the listener process runs with the `stdio recvfd rpath inet` pledges and has `unveil(2)`ed only the directories that it