CVSROOT:        /cvs
Module name:    src
Changes by:     to...@cvs.openbsd.org   2023/10/09 09:32:14

Modified files:
        sbin/ipsecctl  : ipsecctl.c ipsecctl.h pfkey.c 

Log message:
Add pledge("stdio") before parsing pfkey messages. This applies to
ipsecctl -m and ipsecctl -s. Refactor ipsecctl_show_*() to setup all
sysctls first before dropping privileges and finally parsing and
printing IPsec SAs and flows.

feedback and ok mbuhl@
ok deraadt@

Reply via email to