---------------------
Date: 2019/04/24 20:13:49
Author: mestre
Branch: HEAD
Tag: (none) 
Log:
restrict filesystem access to read only on main process via unveil(2)

ok benno@ deraadt@

Members: 
        relayd.c:1.174->1.175 
---------------------

This breaks "check script". OK, or any better ideas?

Index: relayd.c
===================================================================
RCS file: /cvs/src/usr.sbin/relayd/relayd.c,v
retrieving revision 1.180
diff -u -p -r1.180 relayd.c
--- relayd.c    26 Jun 2019 12:13:47 -0000      1.180
+++ relayd.c    30 Aug 2019 16:44:57 -0000
@@ -223,11 +223,6 @@ main(int argc, char *argv[])
        if (ps->ps_noaction == 0)
                log_info("startup");
 
-       if (unveil("/", "r") == -1)
-               err(1, "unveil");
-       if (unveil(NULL, NULL) == -1)
-               err(1, "unveil");
-
        event_init();
 
        signal_set(&ps->ps_evsigint, SIGINT, parent_sig_handler, ps);

Reply via email to