From: mestre <mestre@openbsd.org>
Date: Thu, 26 Jul 2018 19:32:52 +0000 (+0000)
Subject: reduce pledge(2) to the bare minimum:
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=aa29652caa049f1be07b8332c8830913cb6ce6a9;p=openbsd

reduce pledge(2) to the bare minimum:
after dbopen(3) occurs then all operations are on fds which don't need
rpath/wpath and therefore spamdb(8) only needs stdio at all times after the DB
was already open(2)ed

great input from semarie@ OK deraadt@
---

diff --git a/usr.sbin/spamdb/spamdb.c b/usr.sbin/spamdb/spamdb.c
index f1766db50c5..871605ca826 100644
--- a/usr.sbin/spamdb/spamdb.c
+++ b/usr.sbin/spamdb/spamdb.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: spamdb.c,v 1.34 2017/10/29 19:11:34 millert Exp $	*/
+/*	$OpenBSD: spamdb.c,v 1.35 2018/07/26 19:32:52 mestre Exp $	*/
 
 /*
  * Copyright (c) 2004 Bob Beck.  All rights reserved.
@@ -368,13 +368,8 @@ main(int argc, char **argv)
 		    action ? "writing" : "reading");
 	}
 
-	if (action == 0) {
-		if (pledge("stdio rpath", NULL) == -1)
-			err(1, "pledge");
-	} else {
-		if (pledge("stdio rpath wpath", NULL) == -1)
-			err(1, "pledge");
-	}
+	if (pledge("stdio", NULL) == -1)
+		err(1, "pledge");
 
 	switch (action) {
 	case 0: