summaryrefslogtreecommitdiff
path: root/usr.sbin/tcpdump
diff options
context:
space:
mode:
authorTheo de Raadt <deraadt@cvs.openbsd.org>2015-10-06 15:39:45 +0000
committerTheo de Raadt <deraadt@cvs.openbsd.org>2015-10-06 15:39:45 +0000
commit552af3051c5ab2dea9e04715cf329b0cef0371db (patch)
tree4188955399292bcd66e0d9e7ab015324509f427d /usr.sbin/tcpdump
parentbcd717a718a3790611ee0c7f742a6c4b1e13e30c (diff)
Move from tame "cmsg" to tame "sendfd" or "recvfd", depending on which
way the process moves fd's.
Diffstat (limited to 'usr.sbin/tcpdump')
-rw-r--r--usr.sbin/tcpdump/privsep.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/usr.sbin/tcpdump/privsep.c b/usr.sbin/tcpdump/privsep.c
index dc1ab16392b..c57053e68ef 100644
--- a/usr.sbin/tcpdump/privsep.c
+++ b/usr.sbin/tcpdump/privsep.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: privsep.c,v 1.36 2015/10/03 00:51:08 deraadt Exp $ */
+/* $OpenBSD: privsep.c,v 1.37 2015/10/06 15:39:44 deraadt Exp $ */
/*
* Copyright (c) 2003 Can Erkin Acar
@@ -281,7 +281,7 @@ priv_init(int argc, char **argv)
case PRIV_INIT_DONE:
test_state(cmd, STATE_RUN);
impl_init_done(socks[0], &bpfd);
- if (tame("malloc cmsg inet ioctl dns rpath", NULL) == -1)
+ if (tame("stdio rpath inet unix ioctl dns recvfd", NULL) == -1)
err(1, "tame");
break;
case PRIV_GETHOSTBYADDR: