diff options
author | Gilles Chehade <gilles@cvs.openbsd.org> | 2015-10-14 19:56:59 +0000 |
---|---|---|
committer | Gilles Chehade <gilles@cvs.openbsd.org> | 2015-10-14 19:56:59 +0000 |
commit | 58b8d435841194aed9c34b47300c2da0c9781650 (patch) | |
tree | 5b82c6b4dde59bb8d209401a3abfcf306dd27a30 | |
parent | 7098d5dcc0a8bd0f9e0bb0edf62f52bf5880510a (diff) |
pledge() privileged process
ok deraadt@
-rw-r--r-- | usr.sbin/smtpd/smtpd.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/usr.sbin/smtpd/smtpd.c b/usr.sbin/smtpd/smtpd.c index 4bf1af4bb86..099cd595c9c 100644 --- a/usr.sbin/smtpd/smtpd.c +++ b/usr.sbin/smtpd/smtpd.c @@ -1,4 +1,4 @@ -/* $OpenBSD: smtpd.c,v 1.246 2015/10/14 09:14:11 sunil Exp $ */ +/* $OpenBSD: smtpd.c,v 1.247 2015/10/14 19:56:58 gilles Exp $ */ /* * Copyright (c) 2008 Gilles Chehade <gilles@poolp.org> @@ -690,6 +690,9 @@ main(int argc, char *argv[]) purge_task(); + if (pledge("stdio rpath wpath cpath tmppath getpw sendfd proc exec", NULL) == -1) + err(1, "pledge"); + if (event_dispatch() < 0) fatal("smtpd: event_dispatch"); |