diff options
author | Theo de Raadt <deraadt@cvs.openbsd.org> | 2015-11-29 03:23:20 +0000 |
---|---|---|
committer | Theo de Raadt <deraadt@cvs.openbsd.org> | 2015-11-29 03:23:20 +0000 |
commit | e5df2491f6fb39c9211632208f595508d7b4e591 (patch) | |
tree | 98c24a877068b6f63381509daefccfd83d4ea458 /sys/kern/kern_pledge.c | |
parent | e2f20d9458e2ad9ecafd271c22689e017ea952c0 (diff) |
On a SMALL_KERNEL, pledge "pf" has to be a no-op. We cannot match
the device node (since it does not exist...)
Diffstat (limited to 'sys/kern/kern_pledge.c')
-rw-r--r-- | sys/kern/kern_pledge.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/sys/kern/kern_pledge.c b/sys/kern/kern_pledge.c index 175378becb2..d05ba6b18fb 100644 --- a/sys/kern/kern_pledge.c +++ b/sys/kern/kern_pledge.c @@ -1,4 +1,4 @@ -/* $OpenBSD: kern_pledge.c,v 1.127 2015/11/29 01:15:49 benno Exp $ */ +/* $OpenBSD: kern_pledge.c,v 1.128 2015/11/29 03:23:19 deraadt Exp $ */ /* * Copyright (c) 2015 Nicholas Marriott <nicm@openbsd.org> @@ -1201,6 +1201,7 @@ pledge_ioctl(struct proc *p, long com, struct file *fp) } if ((p->p_p->ps_pledge & PLEDGE_PF)) { +#ifndef SMALL_KERNEL switch (com) { case DIOCADDRULE: case DIOCGETSTATUS: @@ -1219,6 +1220,7 @@ pledge_ioctl(struct proc *p, long com, struct file *fp) return (0); break; } +#endif /* !SMALL_KERNEL */ } if ((p->p_p->ps_pledge & PLEDGE_TTY)) { |