Re: rtadvd: pledge() and pidfile() are in a boat

2015-10-25 Thread Jérémie Courrèges-Anglas
j...@wxcvbn.org (Jérémie Courrèges-Anglas) writes: > So I took look at which pledge requests rtadvd could use. > > Turns out it can't call pledge early, because it attempts to retrieve > IPV6CTL_FORWARDING and pledge currently denies it. rtadvd is the only > user of IPV6CTL_FORWARDING in base, so

rtadvd: pledge() and pidfile() are in a boat

2015-10-25 Thread Jérémie Courrèges-Anglas
So I took look at which pledge requests rtadvd could use. Turns out it can't call pledge early, because it attempts to retrieve IPV6CTL_FORWARDING and pledge currently denies it. rtadvd is the only user of IPV6CTL_FORWARDING in base, so IMO it doesn't call for a change in kern_pledge.c. There a