From: "Theo de Raadt" <deraadt@openbsd.org>
Subject: Re: www/ungoogled-chromium: configurable cdm pledges
Cc: Renato Aguiar <renato@renatoaguiar.net>, ports <ports@openbsd.org>, Robert Nagy <robert@openbsd.org>, Stuart Henderson <stu@spacehopper.org>
Date: Sat, 14 Mar 2026 15:42:18 -0600

Theo de Raadt <deraadt@openbsd.org> wrote:

> Renato Aguiar <renato@renatoaguiar.net> wrote:
> 
> > I agree that, in general, pledge/unveil shouldn't be configurable, but,
> > in this particular case, ungoogled-chromium is loading an external
> > library (openwv) that isn't distributed with the main application. It is
> > impossible for it to know for sure what permissions are needed.

Furthermore for openwv, I strongly doubt it is doing anything special
which cannot be determined ahead of time.