CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2018/10/28 16:42:33
Modified files:
sys/kern : kern_unveil.c subr_prf.c vfs_lookup.c
vfs_syscalls.c
sys/sys : proc.h
regress/sys/kern/unveil: syscalls.c
lib/libc/sys : unveil.2
Log message:
Correctly deal with upper level unveil's by keeping track of the covering
unveil for each unveil in the process at unveil() time, and refactoring the
handling of current directory and ISDOTDOT to be much more sensible.
Worked out at ns2k18 with guenther@.
ok deraadt@
