j...@wxcvbn.org (Jeremie Courreges-Anglas) writes:
> j...@wxcvbn.org (Jeremie Courreges-Anglas) writes:
>
>> j...@wxcvbn.org (Jeremie Courreges-Anglas) writes:
>>
>>> Nobody cares about route6d, and it shows: runas as root, not chrooted.
>>> Also it uses wide pledge(2) permissions.
>>>
>>> I have
j...@wxcvbn.org (Jeremie Courreges-Anglas) writes:
> j...@wxcvbn.org (Jeremie Courreges-Anglas) writes:
>
>> Nobody cares about route6d, and it shows: runas as root, not chrooted.
>> Also it uses wide pledge(2) permissions.
>>
>> I have diffs to switch the logging to log.c and use it to support th
2016-07-05 20:17 GMT-03:00 Jeremie Courreges-Anglas :
>
> Nobody cares about route6d, and it shows: runas as root, not chrooted.
> Also it uses wide pledge(2) permissions.
>
> I have diffs to switch the logging to log.c and use it to support the -R
> option and /var/run/route6d_dump. The end goal
ok
Jeremie Courreges-Anglas(j...@wxcvbn.org) on 2016.07.06 13:48:51 +0200:
> j...@wxcvbn.org (Jeremie Courreges-Anglas) writes:
>
> > Nobody cares about route6d, and it shows: runas as root, not chrooted.
> > Also it uses wide pledge(2) permissions.
> >
> > I have diffs to switch the logging to l
On Wed, 06 Jul 2016 13:48:51 +0200, Jeremie Courreges-Anglas wrote:
> > - nuke util.h, not needed since pidfile(3) went away
> > - nuke the rrt_same member of struct riprt, "future use" since import
> > - mark rtdexit as __dead
> > - nuke progname handling
> > - fix pid handling: cache the pid *af
j...@wxcvbn.org (Jeremie Courreges-Anglas) writes:
> Nobody cares about route6d, and it shows: runas as root, not chrooted.
> Also it uses wide pledge(2) permissions.
>
> I have diffs to switch the logging to log.c and use it to support the -R
> option and /var/run/route6d_dump. The end goal is t
Nobody cares about route6d, and it shows: runas as root, not chrooted.
Also it uses wide pledge(2) permissions.
I have diffs to switch the logging to log.c and use it to support the -R
option and /var/run/route6d_dump. The end goal is to use a tighter
pledge(2) call:
+ if (pledge("stdio in
