CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2016/04/26 07:30:12
Modified files:
usr.sbin/user : user.c
Log message:
Add pledge(2) promises independently on each user(8)'s functions as follows:
useradd: stdio rpath wpath cpath fattr flock proc exec getpw id
usermod: stdio rpath wpath cpath fattr flock proc exec getpw id
userdel: stdio rpath wpath cpath fattr flock proc exec getpw id
userinfo: stdio getpw
groupadd: stdio rpath wpath cpath fattr flock getpw
groupmod: stdio rpath wpath cpath fattr flock
groupdel: stdio rpath wpath cpath fattr flock
groupinfo: stdio getpw
This was extensively tested by me and tim@ who found some issues on my first
versions. deraadt@ prodded me to commit this now to check who uses it in order
to report back any fallbacks with the diff, if you find any please inform us.