diff options
| author |   bluhm <bluhm@openbsd.org> | 2021-01-20 16:36:09 +0000 |
|---|---|---|
| committer | bluhm <bluhm@openbsd.org> | 2021-01-20 16:36:09 +0000 |
| commit | f0bd57ec98731988301fd829f836873cc62f369b (patch) | |
| tree | a53359e7a0b09d80d17b30f568cecfd86ff41b8b | |
| parent | Check the rewritten address output from tcpdump -e on pflog. (diff) | |
| download | wireguard-openbsd-f0bd57ec98731988301fd829f836873cc62f369b.tar.xz wireguard-openbsd-f0bd57ec98731988301fd829f836873cc62f369b.zip | |
If pledge "wroute" is missing for setsockopt SO_RTABLE, print failure
message "wroute" into dmesg. Since revision 1.263 pledge "wroute"
allows to change the routing table of a socket.
OK florian@ semarie@
| -rw-r--r-- | sys/kern/kern_pledge.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/kern/kern_pledge.c b/sys/kern/kern_pledge.c index c969af7c7a1..9ffb7f2ffb9 100644 --- a/sys/kern/kern_pledge.c +++ b/sys/kern/kern_pledge.c @@ -1,4 +1,4 @@ -/* $OpenBSD: kern_pledge.c,v 1.268 2021/01/19 17:41:51 deraadt Exp $ */ +/* $OpenBSD: kern_pledge.c,v 1.269 2021/01/20 16:36:09 bluhm Exp $ */ /* * Copyright (c) 2015 Nicholas Marriott <nicm@openbsd.org> @@ -1401,7 +1401,7 @@ pledge_sockopt(struct proc *p, int set, int level, int optname) case SOL_SOCKET: switch (optname) { case SO_RTABLE: - return pledge_fail(p, EINVAL, PLEDGE_INET); + return pledge_fail(p, EINVAL, PLEDGE_WROUTE); } return (0); } |