CVSROOT: /cvs Module name: src Changes by: [email protected] 2015/10/02 20:35:56
Modified files:
usr.bin/patch : patch.c
Log message:
patch appears to work fully with tame "stdio rpath wpath cpath tmppath fattr".
in case of exploitation, no more network access, fork, execve, etc.
I wonder if we could use whitepath lists here - if it is reasonable to
limit operation in directories known early on?
