Prosody mod_unveil (was Re: messaging)

On Sun, Mar 08, 2026 at 06:34:19AM -0400, Stephen Wiley wrote:
> XMPP with OMEMO is probably the best you can do if you want privacy,
> modern features, and self hosting.
>

When I returned to hosting an XMPP server several years ago, I was wary of
running a service which didn't lock itself down like native OpenBSD daemons.
So I wrote a Prosody module, mod_unveil, that uses both pledge and unveil to
lock down the process as early as possible:

https://github.com/wahern/prosody-openbsd

Re: ungoogled-chromium and syspatch 018_pledgepaths

On Thu, Mar 12, 2026 at 02:04:44PM +0930, Phil Maker wrote:
[...]
> This didn't seem to fix the problem. Perhaps it means update /usr/ports to
> stable? and then do a ports
> build.

You shouldn't need to, the package is pushed to packages-stable
("ungoogled-chromium-145.0.7632.109").

The change is removing "tmppath" from /etc/ungoogled-chromium/pledge.*
if those files haven't been updated by the new package for some reason
you should be able to edit them and remove it.