grep only opens files read-only, reads via stdio or other methods, performs

computation, and outputs result to stdout.  (note: in the tame model,
malloc is implicit because stdio needs it, and mmap is implicit since
malloc needs it; libz is satisfied by this environment also).

this tame change consists of 1 line, setting "stdio rpath" before
getopt.  this protection is fairly strict.  grep could be improved
further by computing a wpathlist based on argv, keeping -R in mind.
feel free to take a shot at it.

grep was an early target of capsicum also.  know anyone running capsicum grep?

ok doug

0 files changed, 0 insertions, 0 deletions