diff options
author | Theo de Raadt <deraadt@cvs.openbsd.org> | 2015-10-10 17:59:16 +0000 |
---|---|---|
committer | Theo de Raadt <deraadt@cvs.openbsd.org> | 2015-10-10 17:59:16 +0000 |
commit | 3f8f70a75ddf49d9e389bf4faa7fc94e2a2d03a2 (patch) | |
tree | cc4282377d7ff8f49bcbfaf09ac4404368cae890 /usr.bin/encrypt | |
parent | 438183935e03fdcb37ad7adfe45794a8939da2ef (diff) |
pledge "stdio rpath tty". rpath for the configuration reading done by
login* subsystem, tty for readpassphase()
ok beck
Diffstat (limited to 'usr.bin/encrypt')
-rw-r--r-- | usr.bin/encrypt/encrypt.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/usr.bin/encrypt/encrypt.c b/usr.bin/encrypt/encrypt.c index 8ba2f790054..28fd4f25d35 100644 --- a/usr.bin/encrypt/encrypt.c +++ b/usr.bin/encrypt/encrypt.c @@ -1,4 +1,4 @@ -/* $OpenBSD: encrypt.c,v 1.40 2015/02/26 17:46:15 tedu Exp $ */ +/* $OpenBSD: encrypt.c,v 1.41 2015/10/10 17:59:15 deraadt Exp $ */ /* * Copyright (c) 1996, Jason Downs. All rights reserved. @@ -93,6 +93,9 @@ main(int argc, char **argv) char *extra = NULL; /* Store login class or number of rounds */ const char *errstr; + if (pledge("stdio rpath tty", NULL) == -1) + err(1, "pledge"); + while ((opt = getopt(argc, argv, "pb:c:")) != -1) { switch (opt) { case 'p': |