From 028db945b36ed893e4a1f02a14118bcc124b8b27 Mon Sep 17 00:00:00 2001 From: Theo de Raadt Date: Thu, 22 Oct 2015 07:52:30 +0000 Subject: at present the setpriority() syscall is considered fairly low risk and placed in pledge "proc". pledge "stdio getpw proc", from Theo Buehler --- usr.bin/renice/renice.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/usr.bin/renice/renice.c b/usr.bin/renice/renice.c index 91b1bb64b4d..28f3df542ce 100644 --- a/usr.bin/renice/renice.c +++ b/usr.bin/renice/renice.c @@ -1,4 +1,4 @@ -/* $OpenBSD: renice.c,v 1.18 2015/05/15 19:34:31 jmc Exp $ */ +/* $OpenBSD: renice.c,v 1.19 2015/10/22 07:52:29 deraadt Exp $ */ /* * Copyright (c) 2009, 2015 Todd C. Miller @@ -55,6 +55,9 @@ main(int argc, char **argv) char *ep, *idstr; const char *errstr; + if (pledge("stdio getpw proc", NULL) == -1) + err(1, "pledge"); + if (argc < 3) usage(); -- cgit v1.2.3