diff options
| author |   florian <florian@openbsd.org> | 2019-06-16 19:49:13 +0000 |
|---|---|---|
| committer | florian <florian@openbsd.org> | 2019-06-16 19:49:13 +0000 |
| commit | 61075b4cebc69dfdae6fae4961969e2308b17e49 (patch) | |
| tree | 2a252bb3eabc28811bf68c4d1e6cfab9f6765d43 /lib/libc/stdlib/realpath.c | |
| parent | redo the environment inheritance to not inherit. it was intended to make (diff) | |
| download | wireguard-openbsd-61075b4cebc69dfdae6fae4961969e2308b17e49.tar.xz wireguard-openbsd-61075b4cebc69dfdae6fae4961969e2308b17e49.zip | |
Trade unveil(2) for chroot(2).
This uses less code and unveil(2) seems to be the better tool here.
The directory one chroots into needs to be carefully setup (they are
not) and comon wisedom is that root can break out of chroots.
There is probably nothing wrong with the chroot code because of pledge
but it still makes me feel uneasy.
input & OK on previous version mestre
OK on previous version deraadt
bug found, input & OK benno
Diffstat (limited to 'lib/libc/stdlib/realpath.c')
0 files changed, 0 insertions, 0 deletions