Re: unveil htpasswd

2018-10-30 Thread Theo de Raadt
Makes sense to me. > Hi, > > htpasswd(1) when in batch mode (-I) and 1 argument is used, or when not in > batch mode and 2 arguments are used we know we have to access argv[0] with rwc > permissions and also to rwc a temporary file in /tmp so we can unveil(2) both > argv[0] and /tmp with rwc

Re: unveil htpasswd

2018-10-30 Thread Florian Obser
OK florian@ On Tue, Oct 30, 2018 at 09:02:48AM +, Ricardo Mestre wrote: > Hi, > > htpasswd(1) when in batch mode (-I) and 1 argument is used, or when not in > batch mode and 2 arguments are used we know we have to access argv[0] with rwc > permissions and also to rwc a temporary file in /tmp

unveil htpasswd

2018-10-30 Thread Ricardo Mestre
Hi, htpasswd(1) when in batch mode (-I) and 1 argument is used, or when not in batch mode and 2 arguments are used we know we have to access argv[0] with rwc permissions and also to rwc a temporary file in /tmp so we can unveil(2) both argv[0] and /tmp with rwc permissions. In order to avoid