Decouple unveil from the pledge flags, by adding dedicated unveil flags
authorbeck <beck@openbsd.org>
Sun, 5 Aug 2018 14:23:57 +0000 (14:23 +0000)
committerbeck <beck@openbsd.org>
Sun, 5 Aug 2018 14:23:57 +0000 (14:23 +0000)
commite1a6e22610ac903571d6f6d9b3fe485ff45b5a75
tree93f7c3ebd3d691ab4cf4f536d1a6322f766718a7
parent4a72e5b639a41c6b119f9018e46fc931800b03b2
Decouple unveil from the pledge flags, by adding dedicated unveil flags
to the namei args. This fixes a bug where chmod would be allowed when
with only READ. This also allows some further cleanup of some awkward
things like PLEDGE_STAT that will follow
Lots of assistence from semarie@ - thanks!
ok semarie@
sys/dev/diskmap.c
sys/kern/exec_elf.c
sys/kern/kern_exec.c
sys/kern/kern_ktrace.c
sys/kern/kern_unveil.c
sys/kern/tty.c
sys/kern/tty_pty.c
sys/kern/vfs_syscalls.c
sys/sys/namei.h
sys/sys/proc.h