Am 02.03.26 um 12:01 schrieb Stuart Henderson:

> committed.

Thanks!

> btw, "tmppath" pledge will be removed from -current and the recent
> -stable releases very soon, it would be good if you could remove support

Luckily, the sandbox class is private since it is way too tied to 
OpenBSD, so nothing else is using it. And tmppath in particular is not 
used at all, meaning this is never constructed in the string passed to 
pledge.

It's a longstanding to do to come up with an OS-agnostic sandboxing API, 
but it's hard to make something that fits every OS.

-- 
Jonathan