relayctl pledges to use stdio only

ok reyk@ sure deraadt@

diff --git a/usr.sbin/relayctl/relayctl.c b/usr.sbin/relayctl/relayctl.c
index defc498..2f8bb5c 100644 (file)
--- a/usr.sbin/relayctl/relayctl.c
+++ b/usr.sbin/relayctl/relayctl.c
@@ -1,4 +1,4 @@
-/*     $OpenBSD: relayctl.c,v 1.53 2015/01/22 17:42:09 reyk Exp $      */
+/*     $OpenBSD: relayctl.c,v 1.54 2015/10/10 00:37:40 benno Exp $     */
 
 /*
  * Copyright (c) 2007 - 2013 Reyk Floeter <reyk@openbsd.org>
@@ -124,6 +124,9 @@ main(int argc, char *argv[])
                err(1, "connect: %s", RELAYD_SOCKET);
        }
 
+       if (pledge("stdio", NULL) == -1)
+               err(1, "tame");
+
        if ((ibuf = malloc(sizeof(struct imsgbuf))) == NULL)
                err(1, NULL);
        imsg_init(ibuf, ctl_sock);