diff options
| author |   deraadt <deraadt@openbsd.org> | 2015-12-04 16:56:35 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 2015-12-04 16:56:35 +0000 |
| commit | 8fd02d5b65907f8fee17c0d81a94d008f28f22bc (patch) | |
| tree | 5c883421f629c05b64e396628a58b5241bf298a9 | |
| parent | refine some logging and error messages. errors will now always go to stderr (diff) | |
| download | wireguard-openbsd-8fd02d5b65907f8fee17c0d81a94d008f28f22bc.tar.xz wireguard-openbsd-8fd02d5b65907f8fee17c0d81a94d008f28f22bc.zip | |
allow utrace(2) by default.
conversation with jsg
| -rw-r--r-- | sys/kern/kern_pledge.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/sys/kern/kern_pledge.c b/sys/kern/kern_pledge.c index e78869a5730..d3b7895caea 100644 --- a/sys/kern/kern_pledge.c +++ b/sys/kern/kern_pledge.c @@ -1,4 +1,4 @@ -/* $OpenBSD: kern_pledge.c,v 1.133 2015/12/04 13:05:34 semarie Exp $ */ +/* $OpenBSD: kern_pledge.c,v 1.134 2015/12/04 16:56:35 deraadt Exp $ */ /* * Copyright (c) 2015 Nicholas Marriott <nicm@openbsd.org> @@ -83,6 +83,7 @@ const u_int pledge_syscalls[SYS_MAXSYSCALL] = { [SYS_sendsyslog] = PLEDGE_ALWAYS, /* stack protector reporting */ [SYS_sendsyslog2] = PLEDGE_ALWAYS, /* stack protector reporting */ [SYS_thrkill] = PLEDGE_ALWAYS, /* raise, abort, stack pro */ + [SYS_utrace] = PLEDGE_ALWAYS, /* ltrace(1) from ld.so */ /* "getting" information about self is considered safe */ [SYS_getuid] = PLEDGE_STDIO, |