From d92baf269bc44da3972d7aa4181dd46394de0676 Mon Sep 17 00:00:00 2001 From: Theo de Raadt Date: Tue, 6 Oct 2015 18:15:03 +0000 Subject: For TAME_PROC, allow setrlimit() --- sys/kern/kern_tame.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'sys/kern') diff --git a/sys/kern/kern_tame.c b/sys/kern/kern_tame.c index 1d6b17363e1..bd0dea281e4 100644 --- a/sys/kern/kern_tame.c +++ b/sys/kern/kern_tame.c @@ -1,4 +1,4 @@ -/* $OpenBSD: kern_tame.c,v 1.63 2015/10/06 17:05:30 deraadt Exp $ */ +/* $OpenBSD: kern_tame.c,v 1.64 2015/10/06 18:15:02 deraadt Exp $ */ /* * Copyright (c) 2015 Nicholas Marriott @@ -138,6 +138,7 @@ const u_int tame_syscalls[SYS_MAXSYSCALL] = { [SYS_kill] = TAME_PROC, [SYS_setpgid] = TAME_PROC, [SYS_sigsuspend] = TAME_PROC, + [SYS_setrlimit] = TAME_PROC, [SYS_setgroups] = TAME_PROC, [SYS_setresgid] = TAME_PROC, -- cgit v1.2.3