From e647dd64ae7cc0e33fc77558b519eae3f633ab00 Mon Sep 17 00:00:00 2001 From: deraadt Date: Sun, 29 Jul 2018 13:02:01 +0000 Subject: [PATCH] mestre and i both concluded pledge can be tightened, "unix" handles the coming code and "rpath wpath" isn't needed ok claudio --- usr.sbin/bgpctl/bgpctl.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/usr.sbin/bgpctl/bgpctl.c b/usr.sbin/bgpctl/bgpctl.c index e0fa1d7c48a..5d490b1076b 100644 --- a/usr.sbin/bgpctl/bgpctl.c +++ b/usr.sbin/bgpctl/bgpctl.c @@ -1,4 +1,4 @@ -/* $OpenBSD: bgpctl.c,v 1.209 2018/07/22 17:07:53 claudio Exp $ */ +/* $OpenBSD: bgpctl.c,v 1.210 2018/07/29 13:02:01 deraadt Exp $ */ /* * Copyright (c) 2003 Henning Brauer @@ -192,7 +192,7 @@ main(int argc, char *argv[]) break; } - if (pledge("stdio rpath wpath unix", NULL) == -1) + if (pledge("stdio unix", NULL) == -1) err(1, "pledge"); if ((fd = socket(AF_UNIX, SOCK_STREAM, 0)) == -1) -- 2.20.1