Since the fsck_* programs now only handle one filesystem, this creates
authorderaadt <deraadt@openbsd.org>
Wed, 14 Oct 2015 16:58:55 +0000 (16:58 +0000)
committerderaadt <deraadt@openbsd.org>
Wed, 14 Oct 2015 16:58:55 +0000 (16:58 +0000)
commitc0c611b7d51f68b61b6e3eea76f604bbb21048f3
treefd00d15f4a2a4dd8825ba5d66836a9536128fa2f
parentc5fe3d78f34cfb95a4a7448852e2a399a4e98125
Since the fsck_* programs now only handle one filesystem, this creates
a point where open() and disklabel reading have completed.  After that
point, pledge "stdio".

As a result, an fsck of a hostile partition (noone ever does that, or
do they? :) is done by a program with SUBSTANTIALLY less system call
exposure.
ok semarie
sbin/fsck_ext2fs/setup.c
sbin/fsck_ffs/setup.c
sbin/fsck_msdos/check.c