compress: tighter pledge

2015-10-16 Thread Christian Weisgerber
Here's an attempt to tighten compress/gzip's pledge: Due to the use of fts(3), we always require rpath, even for gzip out. We only write to stdio and never to any files... * if we are in cat mode (-c, zcat) * if we are in test mode (-t) * if there are no file arguments and there is no -o outfile

Re: compress: tighter pledge

2015-10-16 Thread Theo de Raadt
> Here's an attempt to tighten compress/gzip's pledge: > > Due to the use of fts(3), we always require rpath, even for > gzip out. > > We only write to stdio and never to any files... > * if we are in cat mode (-c, zcat) > * if we are in test mode (-t) > * if there are no file arguments and