mirrors/dhcpcd
0
0
Fork 0
mirror of https://github.com/rsmarples/dhcpcd.git synced 2024-11-23 18:14:09 +08:00
Code Issues Packages Projects Releases Wiki Activity

privsep: Note that unveil(2) is not needed

Browse Source 
As we are in a chroot.
https://www.mail-archive.com/misc@openbsd.org/msg171664.html
This commit is contained in:
Roy Marples 2023-11-10 12:02:19 +00:00
parent 4bb0c8ff02
commit 3941274074
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/privsep.c
View File

@ -622,6 +622,9 @@ ps_entersandbox(const char *_pledge, const char **sandbox)
#elif defined(HAVE_PLEDGE)
if (sandbox != NULL)
*sandbox = "pledge";
// There is no need to use unveil(2) because we are in an empty chroot
// This is encouraged by Theo de Raadt himself:
// https://www.mail-archive.com/misc@openbsd.org/msg171655.html
return pledge(_pledge, NULL);
#elif defined(HAVE_SECCOMP)
if (sandbox != NULL)