List of packages that use pledge and/or unveil?

[ohmpr]

Is their a list online, or can a cli application be convinced to tell me which applications have had pledge and/or unveil applied to them? Theo de Raadt gave a talk where he mentioned 500/600 applications at that time. So someone may have a list.

Thanks

[jggimi]

At one time I recall that each port's Makefile would note this in comments. As an example, something like $ find /usr/ports -name Makefile -exec grep -l pledge {} + might be one way to list pledged ports.

[ohmpr]

so far i'm using a release with binary packages, but that's still good to know. thanks.

[jggimi]

You can still use the -release or -stable ports tree for this type of research.

[albator]

Assuming that pkg_info -f or pkg_info -L is a way to get this information (which might not be true) something like this could work (on installed packages):
for i in $(pkg_info -m|awk '{print $1'})
do
pkg_info -fL $i|egrep "pledge|unveil"
done|sort -u

[ohmpr]

Originally Posted by jggimi

You can still use the -release or -stable ports tree for this type of research.

ok, thanks to both of y'all. i'll check that out.

[bradley]

Nice commands. Good to see so many ports can be pledged. In order to count those mentioned in the ports just:

find /usr/ports -name Makefile -exec grep -l pledge {} + | wc -l