diff options
| author |   mestre <mestre@openbsd.org> | 2018-08-05 08:16:24 +0000 |
|---|---|---|
| committer | mestre <mestre@openbsd.org> | 2018-08-05 08:16:24 +0000 |
| commit | eea063d2bd2142b90b55603a38bc5656ba13d7ec (patch) | |
| tree | 43c4201c1ec259d9eb3072ae6767ba6075adbe8d /usr.sbin/switchd/control.c | |
| parent | Revert back previous and remove cpath pledge(2) promise entirely. We decided (diff) | |
| download | wireguard-openbsd-eea063d2bd2142b90b55603a38bc5656ba13d7ec.tar.xz wireguard-openbsd-eea063d2bd2142b90b55603a38bc5656ba13d7ec.zip | |
Remove cpath pledge(2) promise. We decided that not deleting the unix control
sockets cause no harm and this way we close another attack surface by not
allowing the daemon to create/delete any more files.
OK akoshibe@ florian@
Diffstat (limited to 'usr.sbin/switchd/control.c')
| -rw-r--r-- | usr.sbin/switchd/control.c | 15 |
1 files changed, 2 insertions, 13 deletions
diff --git a/usr.sbin/switchd/control.c b/usr.sbin/switchd/control.c index 9cc78fb3745..1d12bcaa09c 100644 --- a/usr.sbin/switchd/control.c +++ b/usr.sbin/switchd/control.c @@ -1,4 +1,4 @@ -/* $OpenBSD: control.c,v 1.8 2017/01/17 22:10:56 krw Exp $ */ +/* $OpenBSD: control.c,v 1.9 2018/08/05 08:16:24 mestre Exp $ */ /* * Copyright (c) 2010-2016 Reyk Floeter <reyk@openbsd.org> @@ -70,11 +70,10 @@ control_run(struct privsep *ps, struct privsep_proc *p, void *arg) /* * pledge in the control process: * stdio - for malloc and basic I/O including events. - * cpath - for managing the control socket. * unix - for the control socket. * recvfd - for the proc fd exchange. */ - if (pledge("stdio cpath unix recvfd", NULL) == -1) + if (pledge("stdio unix recvfd", NULL) == -1) fatal("pledge"); } @@ -196,16 +195,6 @@ control_listen(struct control_sock *cs) return (0); } -void -control_cleanup(struct control_sock *cs) -{ - if (cs->cs_name == NULL) - return; - event_del(&cs->cs_ev); - event_del(&cs->cs_evt); - (void)unlink(cs->cs_name); -} - /* ARGSUSED */ void control_accept(int listenfd, short event, void *arg) |