diff options
| author |   remi <remi@openbsd.org> | 2018-10-30 16:52:19 +0000 |
|---|---|---|
| committer | remi <remi@openbsd.org> | 2018-10-30 16:52:19 +0000 |
| commit | 27dccea90ca12c2f9cfc080fdde0588fdcaa0bdf (patch) | |
| tree | d6c0e2bda061649e2ed5a9978fe5a50b8cb3bc15 | |
| parent | Add C11's timespec_get(3); minor bump for libc. (diff) | |
| download | wireguard-openbsd-27dccea90ca12c2f9cfc080fdde0588fdcaa0bdf.tar.xz wireguard-openbsd-27dccea90ca12c2f9cfc080fdde0588fdcaa0bdf.zip | |
ospf6d does not support reloading so its parent proc does not need
filesystem access with the exception of the control socket cleanup on
exit.
ok florian@
| -rw-r--r-- | usr.sbin/ospf6d/ospf6d.c | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/usr.sbin/ospf6d/ospf6d.c b/usr.sbin/ospf6d/ospf6d.c index 440907c0d6b..3edab2973d4 100644 --- a/usr.sbin/ospf6d/ospf6d.c +++ b/usr.sbin/ospf6d/ospf6d.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ospf6d.c,v 1.39 2018/09/01 19:21:10 remi Exp $ */ +/* $OpenBSD: ospf6d.c,v 1.40 2018/10/30 16:52:19 remi Exp $ */ /* * Copyright (c) 2005 Claudio Jeker <claudio@openbsd.org> @@ -274,6 +274,11 @@ main(int argc, char *argv[]) fatalx("control socket setup failed"); main_imsg_compose_ospfe_fd(IMSG_CONTROLFD, 0, control_fd); + if (unveil(ospfd_conf->csock, "c") == -1) + fatal("unveil"); + if (unveil(NULL, NULL) == -1) + fatal("unveil"); + if (kr_init(!(ospfd_conf->flags & OSPFD_FLAG_NO_FIB_UPDATE), ospfd_conf->rdomain) == -1) fatalx("kr_init failed"); |