Re: pledge(2) sndioctl(1)

2020-05-24 Thread Alexandre Ratchov
On Fri, May 22, 2020 at 08:10:54AM +0100, Ricardo Mestre wrote: > Hello, > > I tried to open the raw device but now it seems I was to sleepy to > figure out that I couldn't access it due to sndiod(8) having the device > opened earlier and therefore coundn't reach that code path. > > Here's the au

Re: pledge(2) sndioctl(1)

2020-05-22 Thread Ricardo Mestre
Hello, I tried to open the raw device but now it seems I was to sleepy to figure out that I couldn't access it due to sndiod(8) having the device opened earlier and therefore coundn't reach that code path. Here's the audio promise added, but maybe it raises the question again if these utilities s

Re: pledge(2) sndioctl(1)

2020-05-21 Thread Sebastien Marie
On Fri, May 22, 2020 at 06:57:00AM +0200, Sebastien Marie wrote: > On Thu, May 21, 2020 at 11:07:39PM +0100, Ricardo Mestre wrote: > > Hi, > > > > After the handle sioctl_hdl `hdl' is opened (which in itself requires rw fs > > access and opening an unix socket) then all operations happen over that

Re: pledge(2) sndioctl(1)

2020-05-21 Thread Sebastien Marie
On Thu, May 21, 2020 at 11:07:39PM +0100, Ricardo Mestre wrote: > Hi, > > After the handle sioctl_hdl `hdl' is opened (which in itself requires rw fs > access and opening an unix socket) then all operations happen over that handle > so the program may be restricted to only "stdio". > > All option

Re: pledge(2) sndioctl(1)

2020-05-21 Thread Bryan Steele
On Thu, May 21, 2020 at 11:07:39PM +0100, Ricardo Mestre wrote: > Hi, > > After the handle sioctl_hdl `hdl' is opened (which in itself requires rw fs > access and opening an unix socket) then all operations happen over that handle > so the program may be restricted to only "stdio". > > All option

pledge(2) sndioctl(1)

2020-05-21 Thread Ricardo Mestre
Hi, After the handle sioctl_hdl `hdl' is opened (which in itself requires rw fs access and opening an unix socket) then all operations happen over that handle so the program may be restricted to only "stdio". All options were tested successfully, including the examples from the manpage plus tweak