diff options
| author | Theo de Raadt <deraadt@cvs.openbsd.org> | 2018-08-08 14:38:32 +0000 |
|---|---|---|
| committer | Theo de Raadt <deraadt@cvs.openbsd.org> | 2018-08-08 14:38:32 +0000 |
| commit | 9b6edf1597ab39590c31dcab56e25591a502bf2b (patch) | |
| tree | 45ce414f5a90f0a4f5c68a39d4583374258e3cb8 /bin | |
| parent | d84bc263aced5fa6451a29bfc01b71a031a82683 (diff) | |
unveil dev.db "r" for devname(), /dev "r", and in the non-sysctl case
some kernel memory/symbol files.
Diffstat (limited to 'bin')
| -rw-r--r-- | bin/ps/ps.c | 15 |
1 files changed, 14 insertions, 1 deletions
diff --git a/bin/ps/ps.c b/bin/ps/ps.c index f7de06d5d3c..6c054a5d34e 100644 --- a/bin/ps/ps.c +++ b/bin/ps/ps.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ps.c,v 1.71 2016/09/23 06:28:08 bentley Exp $ */ +/* $OpenBSD: ps.c,v 1.72 2018/08/08 14:38:31 deraadt Exp $ */ /* $NetBSD: ps.c,v 1.15 1995/05/18 20:33:25 mycroft Exp $ */ /*- @@ -276,6 +276,19 @@ main(int argc, char *argv[]) if (kd == NULL) errx(1, "%s", errbuf); + if (unveil(_PATH_DEVDB, "r") == -1) + err(1, "unveil"); + if (unveil(_PATH_DEV, "r") == -1) + err(1, "unveil"); + if (swapf) + if (unveil(swapf, "r") == -1) + err(1, "unveil"); + if (nlistf) + if (unveil(nlistf, "r") == -1) + err(1, "unveil"); + if (memf) + if (unveil(memf, "r") == -1) + err(1, "unveil"); if (pledge("stdio rpath getpw ps", NULL) == -1) err(1, "pledge"); |