Re: disable fs access on snmpd

2018-10-30 Thread Theo de Raadt
Looks right. Ricardo Mestre wrote: > snmpd(8)'s main process needs to open the config file and /dev/pf both with > read permissions, but once it reaches pledge(2) just before the main loop both > were already opened. Since snmpd(8) doesn't have a way to load or reload the > config file, not

disable fs access on snmpd

2018-10-30 Thread Ricardo Mestre
Hi, snmpd(8)'s main process needs to open the config file and /dev/pf both with read permissions, but once it reaches pledge(2) just before the main loop both were already opened. Since snmpd(8) doesn't have a way to load or reload the config file, not even through SIGHUP, then rpath promise is