diff options
| author |   mestre <mestre@openbsd.org> | 2018-08-18 15:25:20 +0000 |
|---|---|---|
| committer | mestre <mestre@openbsd.org> | 2018-08-18 15:25:20 +0000 |
| commit | 4a5cc25cbb2a7dd7f868326ff2a5b77635f8f04b (patch) | |
| tree | f0b574fc90731ffec6a60088bb8195bc6006b779 /usr.sbin/rdate/rfc868time.c | |
| parent | Unsurprisingly, zero-width non-breaking spaces have... width 0. (diff) | |
| download | wireguard-openbsd-4a5cc25cbb2a7dd7f868326ff2a5b77635f8f04b.tar.xz wireguard-openbsd-4a5cc25cbb2a7dd7f868326ff2a5b77635f8f04b.zip | |
After calling getaddrinfo(3) both on rfc868 and ntp cases we can drop the "dns"
promise and only pledge("stdio inet") since from here until the end of the
program we will only exchange packets through sockets.
After a discussion with deraadt@ about adding privdrop to it we came to the
conclusion that the easiest and sane solution is just to reduce pledge(2)
instead of adding a ton of code to chroot the child that is already forbidden
to access the filesystem anyway.
Diffstat (limited to 'usr.sbin/rdate/rfc868time.c')
| -rw-r--r-- | usr.sbin/rdate/rfc868time.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/usr.sbin/rdate/rfc868time.c b/usr.sbin/rdate/rfc868time.c index be97fcd4785..2158fb632dc 100644 --- a/usr.sbin/rdate/rfc868time.c +++ b/usr.sbin/rdate/rfc868time.c @@ -1,4 +1,4 @@ -/* $OpenBSD: rfc868time.c,v 1.10 2015/01/16 06:40:20 deraadt Exp $ */ +/* $OpenBSD: rfc868time.c,v 1.11 2018/08/18 15:25:20 mestre Exp $ */ /* $NetBSD: rdate.c,v 1.4 1996/03/16 12:37:45 pk Exp $ */ /* @@ -82,6 +82,9 @@ rfc868time_client(const char *hostname, int family, struct timeval *new, /*NOTREACHED*/ } + if (pledge("stdio inet", NULL) == -1) + err(1, "pledge"); + s = -1; for (res = res0; res; res = res->ai_next) { s = socket(res->ai_family, res->ai_socktype, res->ai_protocol); |