diff options
| author | Ricardo Mestre <mestre@cvs.openbsd.org> | 2021-12-15 11:23:10 +0000 |
|---|---|---|
| committer | Ricardo Mestre <mestre@cvs.openbsd.org> | 2021-12-15 11:23:10 +0000 |
| commit | 80bb5a61b9c08ac3a715124fcb2d1de57c32bafc (patch) | |
| tree | 16e7d7f84ea9fcc422d9d0350227c94dfd4d72ce /usr.sbin/ldapd | |
| parent | a465cf181dfdbde446720500bac36bb4f8e3883b (diff) | |
restrict filesystem access with unveil(2).
this one opens the default table file "/usr/share/misc/usb_hid_usages" through
hid_start(3) from libusbhid, then `dev' (will be the fd used on the ioctls)
and finally `conf' which is the file with the actions to be monitored. `conf'
needs to be unveil(2)ed with read perms since usbhidaction(1) can run as daemon
and this file will be re-read if a SIGHUP is catched.
looks good deraadt@
Diffstat (limited to 'usr.sbin/ldapd')
0 files changed, 0 insertions, 0 deletions