diff options
| author | Theo de Raadt <deraadt@cvs.openbsd.org> | 2018-09-24 22:55:51 +0000 |
|---|---|---|
| committer | Theo de Raadt <deraadt@cvs.openbsd.org> | 2018-09-24 22:55:51 +0000 |
| commit | 5ab59e1c67605218050b84b28157fe2a13f13d9b (patch) | |
| tree | 58f8a1927885d16c6234edcfa88b7fb104b5ccb9 /usr.sbin/makefs | |
| parent | f078a411c6520dc8cd1156302ee049796c4e0d2a (diff) | |
unveil(2) is easy since this only uses one directory tree
(containing no exterior pointing symlinks), and a file.
In snaps for about 2 months.
Diffstat (limited to 'usr.sbin/makefs')
| -rw-r--r-- | usr.sbin/makefs/makefs.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/usr.sbin/makefs/makefs.c b/usr.sbin/makefs/makefs.c index 8946e424926..5b8b4ed823b 100644 --- a/usr.sbin/makefs/makefs.c +++ b/usr.sbin/makefs/makefs.c @@ -1,4 +1,4 @@ -/* $OpenBSD: makefs.c,v 1.19 2016/12/17 16:12:15 krw Exp $ */ +/* $OpenBSD: makefs.c,v 1.20 2018/09/24 22:55:50 deraadt Exp $ */ /* $NetBSD: makefs.c,v 1.53 2015/11/27 15:10:32 joerg Exp $ */ /* @@ -198,6 +198,10 @@ main(int argc, char *argv[]) if (argc != 2) usage(); + if (unveil(argv[0], "rwc") == -1) + err(1, "unveil"); + if (unveil(argv[1], "rw") == -1) + err(1, "unveil"); if (pledge("stdio rpath wpath cpath", NULL) == -1) err(1, "pledge"); |