diff options
| author |   brynet <brynet@openbsd.org> | 2018-11-09 18:39:34 +0000 |
|---|---|---|
| committer | brynet <brynet@openbsd.org> | 2018-11-09 18:39:34 +0000 |
| commit | ec1111dab8fa5c3c32a67972e945559ec4f0ab89 (patch) | |
| tree | 3a69e252721c20dc477c7ae97b0c77324518b6a6 /lib/libpcap/gencode.c | |
| parent | Remove ethers(5) YP support bits from libc as it makes it difficult to (diff) | |
| download | wireguard-openbsd-ec1111dab8fa5c3c32a67972e945559ec4f0ab89.tar.xz wireguard-openbsd-ec1111dab8fa5c3c32a67972e945559ec4f0ab89.zip | |
The 'recvfd' and 'inet' promises are no longer required by tcpdump(8)
This reduces the remaining runtime pledge(2) in the privsep monitor
process to "stdio rpath dns bpf":
- 'rpath' for /etc/{ethers,rpc}, also unveil(2)'d thanks to mestre@!
- 'dns' for DNS lookups
- 'bpf' BIOCGSTATS on ^C
The unprivileged packet parser process remains pledged just "stdio"
This depends on the previous commit that removed YP support from
ethers(5).
ok mestre@
Diffstat (limited to 'lib/libpcap/gencode.c')
0 files changed, 0 insertions, 0 deletions