pledge() control process

ok deraadt@

diff --git a/usr.sbin/smtpd/control.c b/usr.sbin/smtpd/control.c
index 68c2b99..362a8f9 100644 (file)
--- a/usr.sbin/smtpd/control.c
+++ b/usr.sbin/smtpd/control.c
@@ -1,4 +1,4 @@
-/*     $OpenBSD: control.c,v 1.105 2015/10/02 00:26:45 gilles Exp $    */
+/*     $OpenBSD: control.c,v 1.106 2015/10/13 10:59:04 gilles Exp $    */
 
 /*
  * Copyright (c) 2012 Gilles Chehade <gilles@poolp.org>
@@ -296,6 +296,9 @@ control(void)
 
        control_listen();
 
+       if (pledge("stdio unix recvfd sendfd", NULL) == -1)
+               err(1, "pledge");
+
        if (event_dispatch() < 0)
                fatal("event_dispatch");
        control_shutdown();