From 54251acae34fe7d72f1f93a69158fbe16cc8a30e Mon Sep 17 00:00:00 2001
From: C. McEnroe
Date: Mon, 28 Jun 2021 11:55:07 -0400
Subject: Move security to the features list

The restrict option now enables real sandboxing on the two main
target systems.
---
 README.7 | 33 ++++++++++++++++-----------------
 1 file changed, 16 insertions(+), 17 deletions(-)

(limited to 'README.7')

diff --git a/README.7 b/README.7
index e68dd95..10730ab 100644
--- a/README.7
+++ b/README.7
@@ -1,5 +1,5 @@
 .\" To view this file, run: man ./README.7
-.Dd May  4, 2021
+.Dd June 28, 2021
 .Dt README 7
 .Os "Causal Agency"
 .
@@ -45,6 +45,16 @@ is highlighted.
 Ignore:
 visibility of filtered messages
 can be toggled.
+.It
+Security:
+on
+.Fx
+and
+.Ox ,
+the
+.Cm restrict
+option enables sandboxing
+and limits filesystem access.
 .El
 .
 .Ss Non-features
@@ -98,6 +108,11 @@ provided by either
 .Lk https://git.causal.agency/libretls/about LibreTLS
 (for OpenSSL)
 or by LibreSSL.
+It targets
+.Fx ,
+.Ox ,
+macOS
+and Linux.
 .Nm
 and
 .Sy libtls
@@ -107,22 +122,6 @@ Check the Repology pages for
 and
 .Lk https://repology.org/project/libretls/versions libretls .
 .
-.Pp
-.Nm
-targets
-.Fx ,
-.Ox ,
-macOS
-and Linux.
-On
-.Ox ,
-.Xr pledge 2
-is used to limit system operations,
-and with
-.Nm Fl R ,
-.Xr unveil 2
-is used to limit filesystem access.
-.
 .Bd -literal -offset indent
 \&./configure
 make all
-- 
cgit 1.4.1-2-gfad0