Unveiling unveil(2).

This brings unveil into the tree, disabled by default - Currently
this will return EPERM on all attempts to use it until we are
fully certain it is ready for people to start using, but this
now allows for others to do more tweaking and experimentation.

Still needs to send the unveil's across forks and execs before
fully enabling.

Many thanks to robert@ and deraadt@ for extensive testing.
ok deraadt@

1 files changed, 5 insertions, 1 deletions

diff --git a/usr.bin/kdump/ktrstruct.c b/usr.bin/kdump/ktrstruct.c
index 0b3f06ae8eb..ce27c475439 100644
--- a/usr.bin/kdump/ktrstruct.c
+++ b/usr.bin/kdump/ktrstruct.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: ktrstruct.c,v 1.24 2017/12/12 01:12:34 deraadt Exp $	*/
+/*	$OpenBSD: ktrstruct.c,v 1.25 2018/07/13 09:25:23 beck Exp $	*/
 
 /*-
  * Copyright (c) 1988, 1993
@@ -654,6 +654,10 @@ ktrstruct(char *buf, size_t buflen)
 		printf("execpromise=");
 		showbufc(basecol + sizeof("execpromise=") - 1,
 		    (unsigned char *)data, datalen, VIS_DQ | VIS_TAB | VIS_NL);
+	} else if (strcmp(name, "unveil") == 0) {
+		printf("flags=");
+		showbufc(basecol + sizeof("flags=") - 1,
+		    (unsigned char *)data, datalen, VIS_DQ | VIS_TAB | VIS_NL);
 	} else {
 		printf("unknown structure %s\n", name);
 	}