diff options
| author |   mestre <mestre@openbsd.org> | 2018-09-28 14:03:14 +0000 |
|---|---|---|
| committer | mestre <mestre@openbsd.org> | 2018-09-28 14:03:14 +0000 |
| commit | b1ce0718ea873aba7a49e8112377c6bcc8cae777 (patch) | |
| tree | 6c547156a9f8961c36ee803ea0779c04e72b3ded | |
| parent | Add vlan and trunk to arm64's RAMDISK (amd64 parity) (diff) | |
| download | wireguard-openbsd-b1ce0718ea873aba7a49e8112377c6bcc8cae777.tar.xz wireguard-openbsd-b1ce0718ea873aba7a49e8112377c6bcc8cae777.zip | |
add missing unveil(2) of an arbitrary kernel (when -N is used), or _PATH_UNIX by
default, with read permissions.
report and fix provided by semarie@
OK deraadt@
| -rw-r--r-- | sbin/savecore/savecore.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/sbin/savecore/savecore.c b/sbin/savecore/savecore.c index 8b2a6cf50d0..53257574006 100644 --- a/sbin/savecore/savecore.c +++ b/sbin/savecore/savecore.c @@ -1,4 +1,4 @@ -/* $OpenBSD: savecore.c,v 1.58 2018/09/24 21:26:38 deraadt Exp $ */ +/* $OpenBSD: savecore.c,v 1.59 2018/09/28 14:03:14 mestre Exp $ */ /* $NetBSD: savecore.c,v 1.26 1996/03/18 21:16:05 leo Exp $ */ /*- @@ -175,6 +175,10 @@ main(int argc, char *argv[]) syslog(LOG_ERR, "unveil: %m"); exit(1); } + if (unveil(kernel ? kernel : _PATH_UNIX, "r") == -1) { + syslog(LOG_ERR, "unveil: %m"); + exit(1); + } if (pledge("stdio rpath wpath cpath", NULL) == -1) { syslog(LOG_ERR, "pledge: %m"); exit(1); |