diff options
| author |   deraadt <deraadt@openbsd.org> | 2015-10-15 23:06:46 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 2015-10-15 23:06:46 +0000 |
| commit | 10d2511b80a677ea96eaa937b0e2e2a15578ef9d (patch) | |
| tree | 1d558c96f0a5887e158f870bde8d573b5044e7ea | |
| parent | Remove three distracting aliases for NULL. (diff) | |
| download | wireguard-openbsd-10d2511b80a677ea96eaa937b0e2e2a15578ef9d.tar.xz wireguard-openbsd-10d2511b80a677ea96eaa937b0e2e2a15578ef9d.zip | |
After spawning, the parent can pledge "stdio rpath wpath cpath"
from rob pierce
| -rw-r--r-- | usr.bin/sdiff/sdiff.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/usr.bin/sdiff/sdiff.c b/usr.bin/sdiff/sdiff.c index a4eca11a1ba..07eb5c3d340 100644 --- a/usr.bin/sdiff/sdiff.c +++ b/usr.bin/sdiff/sdiff.c @@ -1,4 +1,4 @@ -/* $OpenBSD: sdiff.c,v 1.33 2015/10/10 19:03:08 deraadt Exp $ */ +/* $OpenBSD: sdiff.c,v 1.34 2015/10/15 23:06:46 deraadt Exp $ */ /* * Written by Raymond Lai <ray@cyth.net>. @@ -314,6 +314,9 @@ main(int argc, char **argv) err(2, "could not fork"); } + if (pledge("stdio rpath wpath cpath", NULL) == -1) + err(1, "pledge"); + /* parent */ /* We don't write to the pipe. */ close(fd[1]); |