diff options
| author |   beck <beck@openbsd.org> | 2018-10-28 22:42:33 +0000 |
|---|---|---|
| committer | beck <beck@openbsd.org> | 2018-10-28 22:42:33 +0000 |
| commit | 585157b0f7315aa16c1b4d1d43640f415b441638 (patch) | |
| tree | 2b6bb860d8b6a77eadcaecde2a45e85ced38e107 /lib/libc/sys | |
| parent | Do not printf NULL. (diff) | |
| download | wireguard-openbsd-585157b0f7315aa16c1b4d1d43640f415b441638.tar.xz wireguard-openbsd-585157b0f7315aa16c1b4d1d43640f415b441638.zip | |
Correctly deal with upper level unveil's by keeping track of the covering
unveil for each unveil in the process at unveil() time, and refactoring the
handling of current directory and ISDOTDOT to be much more sensible.
Worked out at ns2k18 with guenther@.
ok deraadt@
Diffstat (limited to 'lib/libc/sys')
| -rw-r--r-- | lib/libc/sys/unveil.2 | 15 |
1 files changed, 2 insertions, 13 deletions
diff --git a/lib/libc/sys/unveil.2 b/lib/libc/sys/unveil.2 index d1c33688b87..6c8036d48cc 100644 --- a/lib/libc/sys/unveil.2 +++ b/lib/libc/sys/unveil.2 @@ -1,4 +1,4 @@ -.\" $OpenBSD: unveil.2,v 1.11 2018/09/26 07:25:53 miko Exp $ +.\" $OpenBSD: unveil.2,v 1.12 2018/10/28 22:42:33 beck Exp $ .\" .\" Copyright (c) 2018 Bob Beck <beck@openbsd.org> .\" @@ -14,7 +14,7 @@ .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. .\" -.Dd $Mdocdate: September 26 2018 $ +.Dd $Mdocdate: October 28 2018 $ .Dt UNVEIL 2 .Os .Sh NAME @@ -161,14 +161,3 @@ The .Fn unveil system call first appeared in .Ox 6.4 . -.Sh BUGS -Filesystem lookups work today when they cross an -.Fn unveil -during -.Xr namei 9 -lookup in the kernel. -A program that does relative operations below a higher -.Fn unveil -may currently not see the parts of the filesystem -underneath the high level unveil. -This is actively being worked on. |