From ad1978efa30a228ecbfc252f64dd00e1a3afaebc Mon Sep 17 00:00:00 2001 From: deraadt Date: Mon, 12 Oct 2015 07:45:48 +0000 Subject: [PATCH] pledge "stdio" after opening files, code is very similar to mkuboot --- usr.sbin/mksuncd/mksuncd.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/usr.sbin/mksuncd/mksuncd.c b/usr.sbin/mksuncd/mksuncd.c index 75428c3c087..dc6becb3422 100644 --- a/usr.sbin/mksuncd/mksuncd.c +++ b/usr.sbin/mksuncd/mksuncd.c @@ -1,4 +1,4 @@ -/* $OpenBSD: mksuncd.c,v 1.2 2010/02/25 17:15:42 deraadt Exp $ */ +/* $OpenBSD: mksuncd.c,v 1.3 2015/10/12 07:45:48 deraadt Exp $ */ /* * Copyright (c) 2001 Jason L. Wright (jason@thought.net) @@ -225,6 +225,9 @@ main(int argc, char **argv) if (of == -1) err(1, "open"); + if (pledge("stdio", NULL) == -1) + err(1, "pledge"); + if (get_label(bf, &sl)) return (1); -- 2.20.1