diff options
| author |   mestre <mestre@openbsd.org> | 2018-09-28 06:48:59 +0000 |
|---|---|---|
| committer | mestre <mestre@openbsd.org> | 2018-09-28 06:48:59 +0000 |
| commit | 1c4529b227bee57e4544887f5266a7aa19a7f9d4 (patch) | |
| tree | b6ae7ec3a1158df176a94cebf842fea062e6504e /share/man/man5 | |
| parent | Move the unions into the rom struct which fixes Coverity CID 1473649 and (diff) | |
| download | wireguard-openbsd-1c4529b227bee57e4544887f5266a7aa19a7f9d4.tar.xz wireguard-openbsd-1c4529b227bee57e4544887f5266a7aa19a7f9d4.zip | |
add unveil(2) to tcpdump(8)
The following files are opened in the privsep proc, with read permissions, and
therefore need to be unveiled:
- /etc/pf.os - for OS fingerprinting, but only unveiled if -o flag is used
- /etc/ethers - ether_ntohost(3)
- /etc/rpc - getrpcbynumber(3)
Additional files are also opened, but they are either opened before reaching
this code path, or are covered by pledge(2)'s dns promise.
shown and tested by a few people
OK brynet@ deraadt@
Diffstat (limited to 'share/man/man5')
0 files changed, 0 insertions, 0 deletions