From c9e5e266b36db7ae3d7be65dad2788e9473238b0 Mon Sep 17 00:00:00 2001 From: bluhm Date: Tue, 20 Oct 2015 12:40:19 +0000 Subject: [PATCH] After pledge "dns" has been refactored and setsockopt(SO_RCVBUF) has been added to it, the syslogd privsep parent does not need pledge "inet" anymore. discussed with deraadt@ --- usr.sbin/syslogd/privsep.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/usr.sbin/syslogd/privsep.c b/usr.sbin/syslogd/privsep.c index 358b60c42f6..7700a11a78b 100644 --- a/usr.sbin/syslogd/privsep.c +++ b/usr.sbin/syslogd/privsep.c @@ -1,4 +1,4 @@ -/* $OpenBSD: privsep.c,v 1.58 2015/10/18 16:35:06 bluhm Exp $ */ +/* $OpenBSD: privsep.c,v 1.59 2015/10/20 12:40:19 bluhm Exp $ */ /* * Copyright (c) 2003 Anil Madhavapeddy @@ -144,7 +144,7 @@ priv_init(char *conf, int numeric, int lockfd, int nullfd, char *argv[]) return 0; } - if (pledge("stdio rpath wpath cpath inet dns getpw sendfd id proc exec", + if (pledge("stdio rpath wpath cpath dns getpw sendfd id proc exec", NULL) == -1) err(1, "pledge priv"); -- 2.20.1