Pledge support for the parent/resolver in identd(8).
authordoug <doug@openbsd.org>
Fri, 16 Oct 2015 05:55:23 +0000 (05:55 +0000)
committerdoug <doug@openbsd.org>
Fri, 16 Oct 2015 05:55:23 +0000 (05:55 +0000)
commit64e16a717d60d07e8b3d3342ff8f7486cc3c3140
treedf5f820772ed136433d515b9dd38226f73474859
parentc1124cbd3c7e980fd4a2b456d25390fe650095f5
Pledge support for the parent/resolver in identd(8).

This limits the resolver to just "stdio getpw" or "stdio getpw rpath"
depending on whether ~/.noident files are checked.

The child/listener cannot use pledge yet because it calls a sysctl that
hasn't been whitelisted.

"commit" deraadt@
usr.sbin/identd/identd.c