summaryrefslogtreecommitdiff
path: root/usr.sbin
diff options
context:
space:
mode:
authorGilles Chehade <gilles@cvs.openbsd.org>2015-10-14 19:56:59 +0000
committerGilles Chehade <gilles@cvs.openbsd.org>2015-10-14 19:56:59 +0000
commit58b8d435841194aed9c34b47300c2da0c9781650 (patch)
tree5b82c6b4dde59bb8d209401a3abfcf306dd27a30 /usr.sbin
parent7098d5dcc0a8bd0f9e0bb0edf62f52bf5880510a (diff)
pledge() privileged process
ok deraadt@
Diffstat (limited to 'usr.sbin')
-rw-r--r--usr.sbin/smtpd/smtpd.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/usr.sbin/smtpd/smtpd.c b/usr.sbin/smtpd/smtpd.c
index 4bf1af4bb86..099cd595c9c 100644
--- a/usr.sbin/smtpd/smtpd.c
+++ b/usr.sbin/smtpd/smtpd.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: smtpd.c,v 1.246 2015/10/14 09:14:11 sunil Exp $ */
+/* $OpenBSD: smtpd.c,v 1.247 2015/10/14 19:56:58 gilles Exp $ */
/*
* Copyright (c) 2008 Gilles Chehade <gilles@poolp.org>
@@ -690,6 +690,9 @@ main(int argc, char *argv[])
purge_task();
+ if (pledge("stdio rpath wpath cpath tmppath getpw sendfd proc exec", NULL) == -1)
+ err(1, "pledge");
+
if (event_dispatch() < 0)
fatal("smtpd: event_dispatch");