diff options
author | 2015-11-18 16:46:30 +0000 | |
---|---|---|
committer | 2015-11-18 16:46:30 +0000 | |
commit | e54c4fa7f1499b46851e5db5d08c0334402c5abe (patch) | |
tree | effe17b5b43cc428d3fd6e095db42633221e2b06 /lib/libc/stdlib/icdb.c | |
parent | Add _shadow variants to the two popular getpw functions (uid and nam). (diff) | |
download | wireguard-openbsd-e54c4fa7f1499b46851e5db5d08c0334402c5abe.tar.xz wireguard-openbsd-e54c4fa7f1499b46851e5db5d08c0334402c5abe.zip |
pledge exposed a simple bug: the unprivileged child tried to print the
policy after receiving it from the parent. print_policy ->
print_proto -> getprotobynumber -> pledge abort because it tried to
access /etc/protocols without rpath. It was just a debugging message
that can be moved to the parent (printing the policy on the sender
side and not the receiver side). The parent has rpath and dns.
Issue found by sthen@ with "proto etherip"
OK sthen@ benno@
Diffstat (limited to 'lib/libc/stdlib/icdb.c')
0 files changed, 0 insertions, 0 deletions