diff options
| author | Theo de Raadt <deraadt@cvs.openbsd.org> | 2019-10-14 19:22:18 +0000 |
|---|---|---|
| committer | Theo de Raadt <deraadt@cvs.openbsd.org> | 2019-10-14 19:22:18 +0000 |
| commit | e0f954bbd2214f8e2a6e175df2e8819072944c0d (patch) | |
| tree | 976a785c7af5bcccc02ade87f65804ce1bde5858 /usr.sbin | |
| parent | 75e733194e284b1e61644f833693d214ef0ce689 (diff) | |
pledge() won't work but we can use unveil() to reduce filesystem access
in these 3 related programs (they borrow parts of each other using .PATH)
Hopefully no regressions, ktrace checks by myself and mestre
Diffstat (limited to 'usr.sbin')
| -rw-r--r-- | usr.sbin/iostat/iostat.c | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/usr.sbin/iostat/iostat.c b/usr.sbin/iostat/iostat.c index 70a00fe5278..9384c3e47bc 100644 --- a/usr.sbin/iostat/iostat.c +++ b/usr.sbin/iostat/iostat.c @@ -1,4 +1,4 @@ -/* $OpenBSD: iostat.c,v 1.41 2018/09/05 09:35:49 yasuoka Exp $ */ +/* $OpenBSD: iostat.c,v 1.42 2019/10/14 19:22:17 deraadt Exp $ */ /* $NetBSD: iostat.c,v 1.10 1996/10/25 18:21:58 scottr Exp $ */ /* @@ -161,6 +161,12 @@ main(int argc, char *argv[]) todo |= SHOW_CPU | SHOW_TTY | SHOW_STATS_1; dkinit(0); + + if (unveil("/", "") == -1) + err(1, "unveil"); + if (unveil(NULL, NULL) == -1) + err(1, "unveil"); + dkreadstats(); selectdrives(argv); |