From 64f3ddc9d030bd4af0e42bc1b825774aead73583 Mon Sep 17 00:00:00 2001
From: mestre <mestre@openbsd.org>
Date: Tue, 4 Jul 2017 23:13:09 +0000
Subject: [PATCH] Revert back previous, pledge cannot be enabled on the
 privsep'd proc yet, at least not as is

Reported by tim@, OK deraadt@ to backout the pledge for now
---
 sbin/pflogd/privsep.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/sbin/pflogd/privsep.c b/sbin/pflogd/privsep.c
index 6b81bc6339a..00ed9ca6a74 100644
--- a/sbin/pflogd/privsep.c
+++ b/sbin/pflogd/privsep.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: privsep.c,v 1.25 2017/06/12 23:37:44 mestre Exp $	*/
+/*	$OpenBSD: privsep.c,v 1.26 2017/07/04 23:13:09 mestre Exp $	*/
 
 /*
  * Copyright (c) 2003 Can Erkin Acar
@@ -118,8 +118,11 @@ priv_init(void)
 	setproctitle("[priv]");
 	close(socks[1]);
 
+#if notyet
+	/* This needs to do bpf ioctl */
 	if (pledge("stdio rpath wpath cpath sendfd proc bpf", NULL) == -1)
 		err(1, "pledge");
+#endif
 
 	while (!gotsig_chld) {
 		if (may_read(socks[0], &cmd, sizeof(int)))
-- 
2.20.1