summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorreyk <reyk@openbsd.org>2016-10-06 18:52:09 +0000
committerreyk <reyk@openbsd.org>2016-10-06 18:52:09 +0000
commit0e03fdd5e9351fa86789f1b0796811762934ee91 (patch)
tree40877ce248f458f0541c9a6a74f7bffe6aed73e6
parentTerminate VMs on shutdown of vmd instead of leaving them running as (diff)
downloadwireguard-openbsd-0e03fdd5e9351fa86789f1b0796811762934ee91.tar.xz
wireguard-openbsd-0e03fdd5e9351fa86789f1b0796811762934ee91.zip
Update the list of vmm ioctls that are allowed by pledge.
OK mlarkin@ stefan@
-rw-r--r--sys/arch/amd64/amd64/vmm.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/sys/arch/amd64/amd64/vmm.c b/sys/arch/amd64/amd64/vmm.c
index 7826b260380..578e4513027 100644
--- a/sys/arch/amd64/amd64/vmm.c
+++ b/sys/arch/amd64/amd64/vmm.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: vmm.c,v 1.91 2016/10/06 07:51:10 mlarkin Exp $ */
+/* $OpenBSD: vmm.c,v 1.92 2016/10/06 18:52:09 reyk Exp $ */
/*
* Copyright (c) 2014 Mike Larkin <mlarkin@openbsd.org>
*
@@ -432,6 +432,9 @@ pledge_ioctl_vmm(struct proc *p, long com)
/* XXX VM processes should only terminate themselves */
case VMM_IOC_RUN:
case VMM_IOC_RESETCPU:
+ case VMM_IOC_INTR:
+ case VMM_IOC_READREGS:
+ case VMM_IOC_WRITEREGS:
return (0);
}