does rad(8) actually need rpath here? as far as i can see it needs to open the
config, plus its includes, but that is already done before pledge(2) by imsg
sending IMSG_RECONF_CONF.

florian@ is this correct or am i trusting too much on my eyes?

Index: rad.c
===================================================================
RCS file: /cvs/src/usr.sbin/rad/rad.c,v
retrieving revision 1.27
diff -u -p -u -r1.27 rad.c
--- rad.c       27 Feb 2021 10:35:20 -0000      1.27
+++ rad.c       23 Oct 2021 17:47:22 -0000
@@ -283,7 +283,7 @@ main(int argc, char *argv[])
        main_imsg_compose_frontend(IMSG_CONTROLFD, control_fd, NULL, 0);
        main_imsg_send_config(main_conf);
 
-       if (pledge("stdio inet rpath sendfd mcast wroute", NULL) == -1)
+       if (pledge("stdio inet sendfd mcast wroute", NULL) == -1)
                fatal("pledge");
 
        main_imsg_compose_frontend(IMSG_STARTUP, -1, NULL, 0);

Reply via email to