diff options
| author | Theo de Raadt <deraadt@cvs.openbsd.org> | 2015-10-28 12:03:40 +0000 |
|---|---|---|
| committer | Theo de Raadt <deraadt@cvs.openbsd.org> | 2015-10-28 12:03:40 +0000 |
| commit | 2e58426ba96edd7d2c8d06cb6a575c26cbdd15c6 (patch) | |
| tree | 1a1eacceed3d2d0599b78344ca85d5b7dc32935b /sys/kern | |
| parent | f21a76db3d0e19e63a19920d35a1c1e335d0ed90 (diff) | |
The short-lived dnssocket/dnsconnect calls are being required because we
suspect everyone has upgraded through the approx week-long window since
SOCK_DNS became available and the libc resolver started using them.
Diffstat (limited to 'sys/kern')
| -rw-r--r-- | sys/kern/kern_pledge.c | 6 |
1 files changed, 1 insertions, 5 deletions
diff --git a/sys/kern/kern_pledge.c b/sys/kern/kern_pledge.c index b21300158c4..122ddd2fb0d 100644 --- a/sys/kern/kern_pledge.c +++ b/sys/kern/kern_pledge.c @@ -1,4 +1,4 @@ -/* $OpenBSD: kern_pledge.c,v 1.82 2015/10/28 09:35:03 deraadt Exp $ */ +/* $OpenBSD: kern_pledge.c,v 1.83 2015/10/28 12:03:39 deraadt Exp $ */ /* * Copyright (c) 2015 Nicholas Marriott <nicm@openbsd.org> @@ -246,10 +246,6 @@ const u_int pledge_syscalls[SYS_MAXSYSCALL] = { [SYS_bind] = PLEDGE_INET | PLEDGE_UNIX | PLEDGE_DNS, [SYS_getsockname] = PLEDGE_INET | PLEDGE_UNIX | PLEDGE_DNS, - /* XXX remove this, and the code in uipc_syscalls.c */ - [SYS_dnssocket] = PLEDGE_DNS, - [SYS_dnsconnect] = PLEDGE_DNS, - [SYS_listen] = PLEDGE_INET | PLEDGE_UNIX, [SYS_accept4] = PLEDGE_INET | PLEDGE_UNIX, [SYS_accept] = PLEDGE_INET | PLEDGE_UNIX, |