CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/08/07 07:26:23
Modified files:
usr.bin/pkgconf/cli: core.c
usr.bin/pkgconf/libpkgconf: pkg.c
Log message:
pkgconf: simplify unveil handling
Instead of giving fine-grained read access by iterating, use a simple
unveil("/", "r"). pkgconf runs with pledge "stdio rpath wpath cpath unveil"
with closed unveil, and only /dev/null and an optional log file have "rwc".
discussed with deraadt a long time ago, agreement by claudio
ok sthen
