CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/10/12 02:54:01
Modified files:
usr.sbin/npppd/npppd: npppd_subr.c npppd_subr.h privsep.c
Log message:
Fix broken() privsep_npppd_check_ifname(), which was not checked at
all, overread. Also, the function and privsep_npppd_check_ifname()
lacked path canonicalization, allowing a non-privileged process to
open any file. Add unveil() to protect them. Also, delete
load_resolv_conf(), which is not used.
Problem found and initial diff provided by Franz Bettag and
acts1631. Work with deraadt.
