diff options
| author | Sebastian Benoit <benno@cvs.openbsd.org> | 2015-11-28 18:10:13 +0000 |
|---|---|---|
| committer | Sebastian Benoit <benno@cvs.openbsd.org> | 2015-11-28 18:10:13 +0000 |
| commit | b8889d5b473f3f11cab98f558c556bbf4e21b702 (patch) | |
| tree | 3725e87d6da865311a089b81eb4393f1e87b870c /sys/kern/kern_pledge.c | |
| parent | 2445b49a1c9d9e759a5d5b5bfb9a303fd60f709b (diff) | |
pledge: allow getsockopt IP_IPDEFTTL with promise inet
then relayd's host check engine can be pledged.
ok reyk@, approach suggested by deraadt@ weeks ago.
Diffstat (limited to 'sys/kern/kern_pledge.c')
| -rw-r--r-- | sys/kern/kern_pledge.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/sys/kern/kern_pledge.c b/sys/kern/kern_pledge.c index a66d3ad9f25..8a72ea8047a 100644 --- a/sys/kern/kern_pledge.c +++ b/sys/kern/kern_pledge.c @@ -1,4 +1,4 @@ -/* $OpenBSD: kern_pledge.c,v 1.125 2015/11/27 18:54:47 jca Exp $ */ +/* $OpenBSD: kern_pledge.c,v 1.126 2015/11/28 18:10:12 benno Exp $ */ /* * Copyright (c) 2015 Nicholas Marriott <nicm@openbsd.org> @@ -1339,6 +1339,7 @@ pledge_sockopt(struct proc *p, int set, int level, int optname) case IP_TOS: case IP_TTL: case IP_MINTTL: + case IP_IPDEFTTL: case IP_PORTRANGE: case IP_RECVDSTADDR: case IP_RECVDSTPORT: |