CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/09/06 12:45:29
Modified files:
sbin/dhcp6leased: dhcp6leased.c
sbin/dhcpleased: dhcpleased.c
sbin/slaacd : slaacd.c
sbin/unwind : unwind.c
usr.sbin/rad : rad.c
Log message:
Use getexecpath(3) in florian's privsep fork+exec daemons. These programs
are normally started from rc(8) which provides absolute-paths, so these
daemons were trusting argv[0] to be safe, unlike the paranoid behaviour in
sshd(8). If the daemon is started manually without absolute-path, execvp(2)
was being used which walks $PATH (includes /sbin and /usr/sbin) and it works
but isn't ideal. Since getexecpath(3) now always provides a
realpath(3)-style canonicalized absolute path, execv(2) can be used instead.
