After opening required descriptors, savecore only plays in one directory

so use unveil(2).

diff --git a/sbin/savecore/savecore.c b/sbin/savecore/savecore.c
index a96c618..8b2a6cf 100644 (file)
--- a/sbin/savecore/savecore.c
+++ b/sbin/savecore/savecore.c
@@ -1,4 +1,4 @@
-/*     $OpenBSD: savecore.c,v 1.57 2016/09/01 14:12:07 tedu Exp $      */
+/*     $OpenBSD: savecore.c,v 1.58 2018/09/24 21:26:38 deraadt Exp $   */
 /*     $NetBSD: savecore.c,v 1.26 1996/03/18 21:16:05 leo Exp $        */
 
 /*-
@@ -171,6 +171,10 @@ main(int argc, char *argv[])
        (void)time(&now);
        kmem_setup();
 
+       if (unveil(dirn, "rwc") == -1) {
+               syslog(LOG_ERR, "unveil: %m");
+               exit(1);
+       }
        if (pledge("stdio rpath wpath cpath", NULL) == -1) {
                syslog(LOG_ERR, "pledge: %m");
                exit(1);