unbound-checkconf pledges "stdio rpath getpw", later narrowing to "stdio rpath".

(File access is needed through the course of a run depending on which options
are configured - e.g. for DNSSEC root keys, hints and zone files).

Based on a diff from, and ok with, mestre@

1 files changed, 8 insertions, 0 deletions

diff --git a/usr.sbin/unbound/smallapp/unbound-checkconf.c b/usr.sbin/unbound/smallapp/unbound-checkconf.c
index eddd3e17282..a8656e685f1 100644
--- a/usr.sbin/unbound/smallapp/unbound-checkconf.c
+++ b/usr.sbin/unbound/smallapp/unbound-checkconf.c
@@ -587,6 +587,10 @@ morechecks(struct config_file* cfg)
 		endpwent();
 #  endif
 	}
+
+	if (pledge("stdio rpath", NULL) == -1)
+		fatal_exit("Could not pledge");
+
 #endif
 	if(cfg->remote_control_enable && options_remote_is_address(cfg)
 		&& cfg->control_use_cert) {
@@ -724,6 +728,10 @@ int main(int argc, char* argv[])
 	if(argc == 1)
 		f = argv[0];
 	else	f = cfgfile;
+
+	if (pledge("stdio rpath getpw", NULL) == -1)
+		fatal_exit("Could not pledge");
+
 	checkconf(f, opt, final);
 	checklock_stop();
 	return 0;