Thank you! :)

@meta Unfortunately I don't have a commit bit. Who can I ask to commit the change?

In D30330#681450, @jilles wrote:

In D30330#681137, @a.wolk_fudosecurity.com wrote:

Unfortunately, some ports like PostgreSQL redefine start_cmd which would make _oomprotect="ALL" silently not work for the database. I am not sure where it would be a good place, but I think it would be worthwhile to document that redefining ${name}_cmd has such a pitfall.

In that particular case, that may not actually be a bad thing, although for the wrong reason. Protecting processes with large or unpredictable memory use is likely to deadlock the system (or close to it) if it runs out of memory, while killing a database server is bad but is likely to be picked up properly by monitoring systems.

Picked the wrong file after regenerating. Sorry, this one has your change.

Updated the diff to your suggestion, which also fixes the mandoc/igor lint.

Fixed one more sentence not started on a new line.

Includes changes suggested by @debdrup and ran the tool against igor and mandoc -T lint fixing reported problems.

In D30334#681326, @debdrup wrote:

Have you tested with textproc/igor and mandoc -T lint?

Updated the raw diff using the git show -U999999 <commit-hash> > change.diff method.

Updated the raw diff using the git show -U999999 <commit-hash> > change.diff method. Hope that helps! :)

Make the pid used in ps(1) call match the sample output.

Mixed up diffs between the reviews. Sorry for the noise.

Document how to obtain the current protection status using ps(1).

In D30334#681210, @debdrup wrote:

Yes, it would be good to have a documented method of checking the protected flag, so go ahead and add that.

Once ready, I'll push this along with the other commit.

lgtm, however please note that I am not a committer.

It would also be nice to have discoverability from protect(1). Something to the notion of: "Daemons can be automatically protected using _oomprotect in rc.conf(5)" and a SEE ALSO to rc.conf(5).

I found out the hard way, that an rc script overriding start_cmd ignores some mechanisms. This may be by design. Those ignored are at the least:

This is the commit message that phrabricator silently removed: