preservation modes can adjust setugid bits, so no pledge is possible.
authorderaadt <deraadt@openbsd.org>
Mon, 12 Oct 2015 05:05:24 +0000 (05:05 +0000)
committerderaadt <deraadt@openbsd.org>
Mon, 12 Oct 2015 05:05:24 +0000 (05:05 +0000)
commit284f68dbad454d03549a697187015f8707789399
tree6bf6250588f9948d66d4a3eaea65c21899111a87
parent280b2aa1fa398c74450fa7ca067aa8c6bdd0cc99
preservation modes can adjust setugid bits, so no pledge is possible.
Otherwise, lay the groundwork for whether a gzip program may be run or not.
After such a gzip program is started, pledge the program will not exec
again.  Took a few iterations to get this going... it is looking good.
with guenther.
bin/pax/ar_io.c
bin/pax/pax.c