Pledge that ln only needs "stdio rpath cpath".

ok deraadt@

diff --git a/bin/ln/ln.c b/bin/ln/ln.c
index 653875c..329b3d4 100644 (file)
--- a/bin/ln/ln.c
+++ b/bin/ln/ln.c
@@ -1,4 +1,4 @@
-/*     $OpenBSD: ln.c,v 1.22 2015/01/16 06:39:32 deraadt Exp $ */
+/*     $OpenBSD: ln.c,v 1.23 2015/10/10 22:36:46 doug Exp $    */
 /*     $NetBSD: ln.c,v 1.10 1995/03/21 09:06:10 cgd Exp $      */
 
 /*
@@ -58,6 +58,9 @@ main(int argc, char *argv[])
        int ch, exitval;
        char *sourcedir;
 
+       if (pledge("stdio rpath cpath", NULL) == -1)
+               err(1, "pledge");
+
        while ((ch = getopt(argc, argv, "fhLnPs")) != -1)
                switch (ch) {
                case 'f':