Re: Tighten nl(1) pledge(2) a bit

2019-04-21 Thread Rafael Neves
On Sat, Apr 20, 2019 at 07:10:21PM -0600, Theo de Raadt wrote: > Rafael Neves wrote: > > > Hi tech@, > > > > The Patch 1 below tighten pledge(2) promises to stdio, after the > > freopen(3) call, > > I've commited this. > > > and replaces an exit(3) call to return, so the > > stack protector co

Re: Tighten nl(1) pledge(2) a bit

2019-04-20 Thread Theo de Raadt
Rafael Neves wrote: > Hi tech@, > > The Patch 1 below tighten pledge(2) promises to stdio, after the > freopen(3) call, I've commited this. > and replaces an exit(3) call to return, so the > stack protector could be used. I'm still not a huge fan of those. I don't recall ever seeing an over

Tighten nl(1) pledge(2) a bit

2019-04-20 Thread Rafael Neves
Hi tech@, The Patch 1 below tighten pledge(2) promises to stdio, after the freopen(3) call, and replaces an exit(3) call to return, so the stack protector could be used. I verify that after pledge stdio, there are only calls to: getline(3), memcmp(3), regexec(3), printf(3), fwrite(3), fputs(3),