summaryrefslogtreecommitdiff
path: root/usr.bin/encrypt
diff options
context:
space:
mode:
authorTheo de Raadt <deraadt@cvs.openbsd.org>2015-10-10 17:59:16 +0000
committerTheo de Raadt <deraadt@cvs.openbsd.org>2015-10-10 17:59:16 +0000
commit3f8f70a75ddf49d9e389bf4faa7fc94e2a2d03a2 (patch)
treecc4282377d7ff8f49bcbfaf09ac4404368cae890 /usr.bin/encrypt
parent438183935e03fdcb37ad7adfe45794a8939da2ef (diff)
pledge "stdio rpath tty". rpath for the configuration reading done by
login* subsystem, tty for readpassphase() ok beck
Diffstat (limited to 'usr.bin/encrypt')
-rw-r--r--usr.bin/encrypt/encrypt.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/usr.bin/encrypt/encrypt.c b/usr.bin/encrypt/encrypt.c
index 8ba2f790054..28fd4f25d35 100644
--- a/usr.bin/encrypt/encrypt.c
+++ b/usr.bin/encrypt/encrypt.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: encrypt.c,v 1.40 2015/02/26 17:46:15 tedu Exp $ */
+/* $OpenBSD: encrypt.c,v 1.41 2015/10/10 17:59:15 deraadt Exp $ */
/*
* Copyright (c) 1996, Jason Downs. All rights reserved.
@@ -93,6 +93,9 @@ main(int argc, char **argv)
char *extra = NULL; /* Store login class or number of rounds */
const char *errstr;
+ if (pledge("stdio rpath tty", NULL) == -1)
+ err(1, "pledge");
+
while ((opt = getopt(argc, argv, "pb:c:")) != -1) {
switch (opt) {
case 'p':