diff options
| author |   deraadt <deraadt@openbsd.org> | 2015-11-20 07:15:30 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 2015-11-20 07:15:30 +0000 |
| commit | e956b0923267677d0116017e9b6faf83b279220e (patch) | |
| tree | b98c02c7a0e5c078af6d6807674fe270d32a6f63 /sys/netinet/tcp_input.c | |
| parent | VISTTY check in revoke() is not working well for the non-indirected (diff) | |
| download | wireguard-openbsd-e956b0923267677d0116017e9b6faf83b279220e.tar.xz wireguard-openbsd-e956b0923267677d0116017e9b6faf83b279220e.zip | |
Exempt accept(2) from the pledge_socket() check part of the "domain"
check. You cannot open a socket in a domain unless permitted -- but
you need to be able to accept one if the code flow asks for that to
happen. The most recent check is too tight. We may need to iterate the
policy here until we hit the right vibe...
Diffstat (limited to 'sys/netinet/tcp_input.c')
0 files changed, 0 insertions, 0 deletions