diff options
| author |   jca <jca@openbsd.org> | 2015-11-21 16:04:20 +0000 |
|---|---|---|
| committer | jca <jca@openbsd.org> | 2015-11-21 16:04:20 +0000 |
| commit | d3c1188e9d487e3af3b8b0ef3ff79b4abfe7d2d5 (patch) | |
| tree | 0784832ee8e1f2bb8888481bcb2db06c7c23c612 | |
| parent | Unbreak s_client, which should be allowed by pledge(2) to do DNS requests. (diff) | |
| download | wireguard-openbsd-d3c1188e9d487e3af3b8b0ef3ff79b4abfe7d2d5.tar.xz wireguard-openbsd-d3c1188e9d487e3af3b8b0ef3ff79b4abfe7d2d5.zip | |
In pledge(), put "dns" right after "inet".
| -rw-r--r-- | usr.bin/openssl/openssl.c | 4 | ||||
| -rw-r--r-- | usr.bin/openssl/s_client.c | 4 |
2 files changed, 4 insertions, 4 deletions
diff --git a/usr.bin/openssl/openssl.c b/usr.bin/openssl/openssl.c index f99c625260e..e8c75daf0ac 100644 --- a/usr.bin/openssl/openssl.c +++ b/usr.bin/openssl/openssl.c @@ -1,4 +1,4 @@ -/* $OpenBSD: openssl.c,v 1.20 2015/11/21 16:03:06 jca Exp $ */ +/* $OpenBSD: openssl.c,v 1.21 2015/11/21 16:04:20 jca Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -438,7 +438,7 @@ main(int argc, char **argv) arg.data = NULL; arg.count = 0; - if (pledge("stdio inet rpath wpath cpath proc flock tty dns", NULL) == -1) { + if (pledge("stdio inet dns rpath wpath cpath proc flock tty", NULL) == -1) { fprintf(stderr, "openssl: pledge: %s\n", strerror(errno)); exit(1); } diff --git a/usr.bin/openssl/s_client.c b/usr.bin/openssl/s_client.c index c73a5fd38f0..21454c5bf3c 100644 --- a/usr.bin/openssl/s_client.c +++ b/usr.bin/openssl/s_client.c @@ -1,4 +1,4 @@ -/* $OpenBSD: s_client.c,v 1.24 2015/11/21 16:03:06 jca Exp $ */ +/* $OpenBSD: s_client.c,v 1.25 2015/11/21 16:04:20 jca Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -365,7 +365,7 @@ s_client_main(int argc, char **argv) long socket_mtu = 0; if (single_execution) { - if (pledge("stdio inet rpath wpath cpath tty dns", NULL) == -1) { + if (pledge("stdio inet dns rpath wpath cpath tty", NULL) == -1) { perror("pledge"); exit(1); } |