mischief/openbsd-src
1
0
Fork 0
mirror of https://github.com/openbsd/src.git synced 2025-01-04 23:35:36 -08:00
Code

The code path were we pass `pathname' in the arguments is already limited

Browse Source 
with pledge(2), but since we know exactly what it is then we can go further and
also unveil(2) it with read permissions.

OK millert@ deraadt@
This commit is contained in:
mestre 2018-10-26 17:11:32 +00:00
parent 19c03c85de
commit 39972dfb8a
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
usr.bin/getconf/getconf.c
View File

@ -1,4 +1,4 @@
/* $OpenBSD: getconf.c,v 1.19 2016/10/28 07:22:59 schwarze Exp $ */
/* $OpenBSD: getconf.c,v 1.20 2018/10/26 17:11:32 mestre Exp $ */
/*-
* Copyright (c) 1996 The NetBSD Foundation, Inc.
@ -513,6 +513,8 @@ main(int argc, char *argv[])
break;
case PATHCONF:
if (unveil(argv[1], "r") == -1)
err(1, "unveil");
if (pledge("stdio rpath", NULL) == -1)
err(1, "pledge");
errno = 0;