From 7c79878258f8d406cde571045850cb95a1192a5f Mon Sep 17 00:00:00 2001 From: Theo de Raadt Date: Sun, 4 Oct 2015 15:54:16 +0000 Subject: df is a tame "stdio rpath" program, the rpath due to getfsstat and statfs. those two system calls were put into the "rpath" catagory because they expose pathname information. --- bin/df/df.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'bin/df') diff --git a/bin/df/df.c b/bin/df/df.c index d4d928c5471..07d549736e2 100644 --- a/bin/df/df.c +++ b/bin/df/df.c @@ -1,4 +1,4 @@ -/* $OpenBSD: df.c,v 1.52 2015/01/16 06:39:31 deraadt Exp $ */ +/* $OpenBSD: df.c,v 1.53 2015/10/04 15:54:15 deraadt Exp $ */ /* $NetBSD: df.c,v 1.21.2.1 1995/11/01 00:06:11 jtc Exp $ */ /* @@ -79,6 +79,9 @@ main(int argc, char *argv[]) int width, maxwidth; char *mntpt; + if (tame("stdio rpath", NULL) == -1) + err(1, "tame"); + while ((ch = getopt(argc, argv, "hiklnPt:")) != -1) switch (ch) { case 'h': -- cgit v1.2.3