diff options
| author |   kn <kn@openbsd.org> | 2019-12-28 18:36:01 +0000 |
|---|---|---|
| committer | kn <kn@openbsd.org> | 2019-12-28 18:36:01 +0000 |
| commit | 5154e7dc55d274471bbcb01a8bf1e494ef32cd56 (patch) | |
| tree | 902d69cf710edae35ee52939ecf33e5c2da908fc /gnu/usr.bin/perl/cpan/Module-Metadata/lib/Module | |
| parent | Refactor child SA cleanup. (diff) | |
| download | wireguard-openbsd-5154e7dc55d274471bbcb01a8bf1e494ef32cd56.tar.xz wireguard-openbsd-5154e7dc55d274471bbcb01a8bf1e494ef32cd56.zip | |
Run cu(1) in restricted mode
Users must not not be able to transfer files from the local hypervisor
filesystem to VMs/LDOMs, especially since the "vmctl/ldomctl console ..."
might be run as root.
Disable all relevant escape sequences and cause cu to run under "stdio tty"
pledge by using -r.
OK deraadt mlarkin
Diffstat (limited to 'gnu/usr.bin/perl/cpan/Module-Metadata/lib/Module')
0 files changed, 0 insertions, 0 deletions