CVSROOT: /cvs
Module name: src
Changes by: b...@cvs.openbsd.org 2018/08/11 10:16:07
Modified files:
sys/kern : kern_pledge.c kern_unveil.c vfs_syscalls.c
sys/sys : namei.h pledge.h
Log message:
Get rid of PLEDGE_STAT, which was a hack used for unveil.
We use UNVEIL_INSPECT instead in the unveil flags for the same
purpose, and now add traversed vnodes of a path with UNVEIL_INSPECT
instead of with 0 flags and voodoo in unveil_flagmatch. This
allows us to uncontort the logic of unveil_flagmatch a bunch.
helpful review and ok from semarie@
