use tame "stdio rpath wpath cpath fattr". There is some timezone

database stuff here which goes further than most programs, but the
neccessary files are readable using "rpath".

diff --git a/usr.bin/touch/touch.c b/usr.bin/touch/touch.c
index d3b14d6..d446176 100644 (file)
--- a/usr.bin/touch/touch.c
+++ b/usr.bin/touch/touch.c
@@ -1,4 +1,4 @@
-/*     $OpenBSD: touch.c,v 1.23 2015/03/17 19:31:30 millert Exp $      */
+/*     $OpenBSD: touch.c,v 1.24 2015/10/06 13:48:34 deraadt Exp $      */
 /*     $NetBSD: touch.c,v 1.11 1995/08/31 22:10:06 jtc Exp $   */
 
 /*
@@ -60,6 +60,9 @@ main(int argc, char *argv[])
 
        (void)setlocale(LC_ALL, "");
 
+       if (tame("stdio rpath wpath cpath fattr", NULL) == -1)
+               err(1, "tame");
+
        aflag = cflag = mflag = timeset = 0;
        while ((ch = getopt(argc, argv, "acd:fmr:t:")) != -1)
                switch (ch) {