Add an acct(5) flag for pledge violations. Then lastcomm(1) shows
authorbluhm <bluhm@openbsd.org>
Wed, 7 Jun 2017 20:53:59 +0000 (20:53 +0000)
committerbluhm <bluhm@openbsd.org>
Wed, 7 Jun 2017 20:53:59 +0000 (20:53 +0000)
commit696e0573961a3b55379b2d00710e8a213379dbb2
tree5e90404ec3444e17e467cb1ba0ae815bbea864c6
parentf7444fab8606a20ee38d7a9d89bfede0942240de
Add an acct(5) flag for pledge violations.  Then lastcomm(1) shows
when something went wrong.  This allows to monitor whether the
system is under attack and that the attack has been prevented by
OpenBSD pledge(2).
OK deraadt@ millert@ jmc@
lib/libc/sys/pledge.2
sys/kern/kern_pledge.c
sys/sys/acct.h
usr.bin/lastcomm/lastcomm.1
usr.bin/lastcomm/lastcomm.c