diff options
| author |   deraadt <deraadt@openbsd.org> | 2015-10-03 00:58:59 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 2015-10-03 00:58:59 +0000 |
| commit | e7e08b57f5db5d32ce534ce0cde42441a95556aa (patch) | |
| tree | 45471d8644d3f0e78e3247e059fbe5bea8b80825 /usr.bin/patch/patch.c | |
| parent | ping6 is a setuid root priv-drop which holds a sockraw. we can tame it (diff) | |
| download | wireguard-openbsd-e7e08b57f5db5d32ce534ce0cde42441a95556aa.tar.xz wireguard-openbsd-e7e08b57f5db5d32ce534ce0cde42441a95556aa.zip | |
sed only works on files, so the obvious goal is to remove it's network
access in case it is exploited. tame with "stdio wpath rpath cpath"
seesms to covers all usage cases, except -i performs a fchmod() on the
in-place file, so conditionally also needs "fattr".
ok sthen
Diffstat (limited to 'usr.bin/patch/patch.c')
0 files changed, 0 insertions, 0 deletions