good - just needs a "# uses unveil/pledge" comment (usually goes next to 
wantlib), I'll commit with that later, or if someone wants to beat me to it 
it's ok sthen

-- 
  Sent from a phone, apologies for poor formatting.

On 27 March 2026 20:25:20 "Alvar Penning" <post@0x21.biz> wrote:

> On Fri Mar 27, 2026 at 9:16 PM CET, Stuart Henderson wrote:
>> thanks - just checking, are you happy this is ok with the most recent
>> pledge commits?
>
> Yes, I am running this on a recently upgraded -current.
>
> Necessary files for the "dns" promise are allowed via unveil(2), as Go
> uses its own name resolution instead of going through libc by default.
>
> Best,
> Alvar