Theo de Raadt <deraadt@openbsd.org> wrote:

> Renato Aguiar <renato@renatoaguiar.net> wrote:
> 
> > I agree that, in general, pledge/unveil shouldn't be configurable, but,
> > in this particular case, ungoogled-chromium is loading an external
> > library (openwv) that isn't distributed with the main application. It is
> > impossible for it to know for sure what permissions are needed.

Furthermore for openwv, I strongly doubt it is doing anything special
which cannot be determined ahead of time.