diff options
| author | Theo de Raadt <deraadt@cvs.openbsd.org> | 2017-01-23 04:25:06 +0000 |
|---|---|---|
| committer | Theo de Raadt <deraadt@cvs.openbsd.org> | 2017-01-23 04:25:06 +0000 |
| commit | c79450c75979248fff1458d7acd1302286d44035 (patch) | |
| tree | c83a77c5ebcdf18c65fafeb0d7e22121efeafc5b /usr.sbin/tcpdump | |
| parent | 8b744ded342c9a9dbcebe93b1337bd1f0a536685 (diff) | |
Split pledge "ioctl" into "tape" and "bpf", and allow SIOCGIFGROUP only
upon "inet". Adjust the 4 programs that care about this.
Diffstat (limited to 'usr.sbin/tcpdump')
| -rw-r--r-- | usr.sbin/tcpdump/privsep.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/usr.sbin/tcpdump/privsep.c b/usr.sbin/tcpdump/privsep.c index ba7aa82a15a..596822b4355 100644 --- a/usr.sbin/tcpdump/privsep.c +++ b/usr.sbin/tcpdump/privsep.c @@ -1,4 +1,4 @@ -/* $OpenBSD: privsep.c,v 1.43 2016/07/25 02:35:26 deraadt Exp $ */ +/* $OpenBSD: privsep.c,v 1.44 2017/01/23 04:25:05 deraadt Exp $ */ /* * Copyright (c) 2003 Can Erkin Acar @@ -272,7 +272,7 @@ priv_init(int argc, char **argv) test_state(cmd, STATE_RUN); impl_init_done(socks[0], &bpfd); - if (pledge("stdio rpath inet unix ioctl dns recvfd", NULL) == -1) + if (pledge("stdio rpath inet unix dns recvfd bpf", NULL) == -1) err(1, "pledge"); break; |