or if it's used in a pipeline, then it can further pledge to only use stdio-related system calls while doing the actual de/compression. Since ports uses 'bzip2 -dc [file] | tar xf -', it can benefit from this added protection during file extraction.
or if it's used in a pipeline, then it can further pledge to only use stdio-related system calls while doing the actual de/compression. Since ports uses 'bzip2 -dc [file] | tar xf -', it can benefit from this added protection during file extraction.