diff options
| author | Ricardo Mestre <mestre@cvs.openbsd.org> | 2019-04-30 17:05:16 +0000 |
|---|---|---|
| committer | Ricardo Mestre <mestre@cvs.openbsd.org> | 2019-04-30 17:05:16 +0000 |
| commit | 7f1a8bec460a41a172fb21ffab33697ce8395c12 (patch) | |
| tree | 707bfd165ffb416fabf2e45ff246035887730ae4 /distrib/alpha/cdfs/Makefile | |
| parent | 1788d9627b65762b4ae9f5f89110eaad145e423e (diff) | |
Restrict filesystem access with unveil(2):
First it needs to open(2) `device' with read permissions, /dev/hotplug by
default but can be changed via arguments. Then it needs read/execute on both
_PATH_ETC_HOTPLUG_{ATTACH,DETACH} to access(2) and execl(3) them.
ok deraadt@
Diffstat (limited to 'distrib/alpha/cdfs/Makefile')
0 files changed, 0 insertions, 0 deletions