Hey!

This pledge was added with the use of unveil(2), but doesn't require the
getpw promise anymore (it is only needed in mail_spool to get the
username).

This patch makes it stricter.

Best,

Martin

Index: from.c
===================================================================
RCS file: /cvs/src/usr.bin/from/from.c,v
retrieving revision 1.26
diff -u -p -r1.26 from.c
--- from.c      8 Aug 2018 17:52:46 -0000       1.26
+++ from.c      24 May 2020 12:01:06 -0000
@@ -81,7 +81,7 @@ main(int argc, char *argv[])
 
        if (unveil(file, "r") == -1)
                err(1, "unveil");
-       if (pledge("stdio rpath getpw", NULL) == -1)
+       if (pledge("stdio rpath", NULL) == -1)
                err(1, "pledge");
 
        if ((fp = fopen(file, "r")) == NULL) {

Reply via email to