diff options
| author | Ricardo Mestre <mestre@cvs.openbsd.org> | 2017-06-12 23:37:45 +0000 |
|---|---|---|
| committer | Ricardo Mestre <mestre@cvs.openbsd.org> | 2017-06-12 23:37:45 +0000 |
| commit | e488c4f2723127abebea9aa4bfbb7c58ace2072c (patch) | |
| tree | a4a59dbccadc517711a262597641f859b1f0d004 /sbin | |
| parent | 66b924c817dab83e1ec42bd3c64ad1f2120992c0 (diff) | |
pledge(2) bpf has been in use for some time now on tcpdump(8), this will enable
it also for pflogd(8)'s priv proc.
OK deraadt@
Diffstat (limited to 'sbin')
| -rw-r--r-- | sbin/pflogd/privsep.c | 7 |
1 files changed, 2 insertions, 5 deletions
diff --git a/sbin/pflogd/privsep.c b/sbin/pflogd/privsep.c index 9bef398a5e9..6b81bc6339a 100644 --- a/sbin/pflogd/privsep.c +++ b/sbin/pflogd/privsep.c @@ -1,4 +1,4 @@ -/* $OpenBSD: privsep.c,v 1.24 2017/01/23 04:25:05 deraadt Exp $ */ +/* $OpenBSD: privsep.c,v 1.25 2017/06/12 23:37:44 mestre Exp $ */ /* * Copyright (c) 2003 Can Erkin Acar @@ -118,12 +118,9 @@ priv_init(void) setproctitle("[priv]"); close(socks[1]); - -#if notyet - /* This needs to do bpf ioctl */ if (pledge("stdio rpath wpath cpath sendfd proc bpf", NULL) == -1) err(1, "pledge"); -#endif + while (!gotsig_chld) { if (may_read(socks[0], &cmd, sizeof(int))) break; |