summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorderaadt <deraadt@openbsd.org>2015-10-08 14:49:27 +0000
committerderaadt <deraadt@openbsd.org>2015-10-08 14:49:27 +0000
commit6d14ac70c63e3d083fd67cb36b6d1da9b47998c7 (patch)
treec7236d30032a5cf3cb6360eef307952003239f62
parent16 years after E801 memprobe was disabled, probably safe to delete it. (diff)
downloadwireguard-openbsd-6d14ac70c63e3d083fd67cb36b6d1da9b47998c7.tar.xz
wireguard-openbsd-6d14ac70c63e3d083fd67cb36b6d1da9b47998c7.zip
tame "stdio rpath wpath cpath proc exec". make is a shell, and appears
to only need these operations. Take note that "exec" is a 2-day old tame request, so do get a new kernel before you update or risk getting trapped.
-rw-r--r--usr.bin/make/main.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/usr.bin/make/main.c b/usr.bin/make/main.c
index faba8690ceb..891d8602b3a 100644
--- a/usr.bin/make/main.c
+++ b/usr.bin/make/main.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: main.c,v 1.112 2015/10/07 14:16:09 deraadt Exp $ */
+/* $OpenBSD: main.c,v 1.113 2015/10/08 14:49:27 deraadt Exp $ */
/* $NetBSD: main.c,v 1.34 1997/03/24 20:56:36 gwr Exp $ */
/*
@@ -192,6 +192,9 @@ MainParseArgs(int argc, char **argv)
#define OPTFLAGS "BC:D:I:SV:d:ef:ij:km:npqrst"
#define OPTLETTERS "BSiknpqrst"
+ if (tame("stdio rpath wpath cpath proc exec", NULL) == -1)
+ err(1, "tame");
+
optind = 1; /* since we're called more than once */
optreset = 1;
optend = 0;