summaryrefslogtreecommitdiffstats
path: root/usr.sbin/ripd
diff options
context:
space:
mode:
authormestre <mestre@openbsd.org>2019-08-08 16:50:15 +0000
committermestre <mestre@openbsd.org>2019-08-08 16:50:15 +0000
commitfb3dd1dadea95a17218cd3b02789f6085b62a4c2 (patch)
treeec831d72efb310751b2d3d228d429a20ac30c9ae /usr.sbin/ripd
parentadded /* no filesystem visibility */ above unveil("/", "") since "" is too easy (diff)
downloadwireguard-openbsd-fb3dd1dadea95a17218cd3b02789f6085b62a4c2.tar.xz
wireguard-openbsd-fb3dd1dadea95a17218cd3b02789f6085b62a4c2.zip
added /* no filesystem visibility */ above unveil("/", "") since "" is too easy
to misread. as per suggestion by and OK deraadt@
Diffstat (limited to 'usr.sbin/ripd')
-rw-r--r--usr.sbin/ripd/ripd.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/usr.sbin/ripd/ripd.c b/usr.sbin/ripd/ripd.c
index dd5a11cc802..7a34e5989fa 100644
--- a/usr.sbin/ripd/ripd.c
+++ b/usr.sbin/ripd/ripd.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ripd.c,v 1.32 2018/12/31 20:34:16 remi Exp $ */
+/* $OpenBSD: ripd.c,v 1.33 2019/08/08 16:50:15 mestre Exp $ */
/*
* Copyright (c) 2006 Michele Marchetto <mydecay@openbeer.it>
@@ -211,6 +211,7 @@ main(int argc, char *argv[])
rde_pid = rde(conf, pipe_parent2rde, pipe_ripe2rde, pipe_parent2ripe);
ripe_pid = ripe(conf, pipe_parent2ripe, pipe_ripe2rde, pipe_parent2rde);
+ /* no filesystem visibility */
if (unveil("/", "") == -1)
fatal("unveil");
if (unveil(NULL, NULL) == -1)