On 04:21 Wed 15 Dec , Ricardo Mestre wrote: > CVSROOT: /cvs > Module name: src > Changes by: [email protected] 2021/12/15 04:21:35 > > Modified files: > usr.bin/usbhidctl: usbhid.c > > Log message: > restrict all filesystem access with unveil(2). > > hid_start(3) opens `table' through libusbhid, then usbhidctl(1) itself opens > `dev', after that it's just performing ioctls on the fd left opened by the > latter so all fs access can be disabled. >
this was ok deraadt@
