tame "stdio rpath wpath cpath proc exec tty". proc and exec because ed

it is a shell (it has a !command).  tty because it uses TIOCGWINSZ in
a SIGWINCH handler.

diff --git a/bin/ed/main.c b/bin/ed/main.c
index 0674da7..ce29ed1 100644 (file)
--- a/bin/ed/main.c
+++ b/bin/ed/main.c
@@ -1,4 +1,4 @@
-/*     $OpenBSD: main.c,v 1.48 2015/10/04 15:23:24 millert Exp $       */
+/*     $OpenBSD: main.c,v 1.49 2015/10/07 05:37:42 deraadt Exp $       */
 /*     $NetBSD: main.c,v 1.3 1995/03/21 09:04:44 cgd Exp $     */
 
 /* main.c: This file contains the main control and user-interface routines
@@ -48,6 +48,7 @@
 #include <setjmp.h>
 #include <unistd.h>
 #include <pwd.h>
+#include <err.h>
 
 #include "ed.h"
 
@@ -102,6 +103,9 @@ main(volatile int argc, char ** volatile argv)
        int c, n;
        int status = 0;
 
+       if (tame("stdio rpath wpath cpath proc exec tty", NULL) == -1)
+               err(1, "tame");
+
        home = getenv("HOME");
 
 top: