From 2b699e5cc7ee93a5261125568f244451cf0a6b26 Mon Sep 17 00:00:00 2001
From: deraadt <deraadt@openbsd.org>
Date: Sun, 29 Jul 2018 19:40:41 +0000
Subject: [PATCH] Add _PATH_AUTHPROGDIR = "/usr/libexec/auth", this path will
 be used to unveil. Unfortunately the auth subsystem uses _PATH_AUTHPROG =
 "/usr/libexec/auth/login_", which it auth-program is appended to -- a rather
 gross idea which now shows lack of wisdom.

---
 include/login_cap.h | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/include/login_cap.h b/include/login_cap.h
index 910d78b5dd9..46a8bb6311b 100644
--- a/include/login_cap.h
+++ b/include/login_cap.h
@@ -1,4 +1,4 @@
-/*	$OpenBSD: login_cap.h,v 1.15 2014/11/21 05:13:44 tedu Exp $	*/
+/*	$OpenBSD: login_cap.h,v 1.16 2018/07/29 19:40:41 deraadt Exp $	*/
 
 /*-
  * Copyright (c) 1995,1997 Berkeley Software Design, Inc. All rights reserved.
@@ -42,6 +42,7 @@
 #define	LOGIN_DEFSERVICE	"login"
 #define	LOGIN_DEFUMASK		022
 #define	_PATH_LOGIN_CONF	"/etc/login.conf"
+#define	_PATH_AUTHPROGDIR	"/usr/libexec/auth"
 #define	_PATH_AUTHPROG		"/usr/libexec/auth/login_"
 
 #define	LOGIN_SETGROUP		0x0001	/* Set group */
-- 
2.20.1