From b448ff9412ff44821e757049b8a6cc43042013dd Mon Sep 17 00:00:00 2001 From: deraadt Date: Thu, 22 Oct 2015 07:52:29 +0000 Subject: [PATCH] at present the setpriority() syscall is considered fairly low risk and placed in pledge "proc". pledge "stdio getpw proc", from Theo Buehler --- usr.bin/renice/renice.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/usr.bin/renice/renice.c b/usr.bin/renice/renice.c index 91b1bb64b4d..28f3df542ce 100644 --- a/usr.bin/renice/renice.c +++ b/usr.bin/renice/renice.c @@ -1,4 +1,4 @@ -/* $OpenBSD: renice.c,v 1.18 2015/05/15 19:34:31 jmc Exp $ */ +/* $OpenBSD: renice.c,v 1.19 2015/10/22 07:52:29 deraadt Exp $ */ /* * Copyright (c) 2009, 2015 Todd C. Miller @@ -55,6 +55,9 @@ main(int argc, char **argv) char *ep, *idstr; const char *errstr; + if (pledge("stdio getpw proc", NULL) == -1) + err(1, "pledge"); + if (argc < 3) usage(); -- 2.20.1