pledge "stdio rpath wpath cpath"; all the path options are used

until the bitter end.

diff --git a/usr.sbin/config/main.c b/usr.sbin/config/main.c
index 6805b26..7f6b8a9 100644 (file)
--- a/usr.sbin/config/main.c
+++ b/usr.sbin/config/main.c
@@ -1,4 +1,4 @@
-/*     $OpenBSD: main.c,v 1.48 2015/01/16 06:40:16 deraadt Exp $       */
+/*     $OpenBSD: main.c,v 1.49 2015/10/12 15:56:58 deraadt Exp $       */
 /*     $NetBSD: main.c,v 1.22 1997/02/02 21:12:33 thorpej Exp $        */
 
 /*
@@ -107,6 +107,9 @@ main(int argc, char *argv[])
        int ch, eflag, uflag, fflag;
        char dirbuffer[PATH_MAX];
 
+       if (pledge("stdio rpath wpath cpath", NULL) == -1)
+               err(1, "pledge");
+
        pflag = eflag = uflag = fflag = 0;
        while ((ch = getopt(argc, argv, "egpfb:s:o:u")) != -1) {
                switch (ch) {