Up to [local] / src / usr.bin / doas
Request diff between arbitrary revisions
Default branch: MAIN
Current tag: OPENBSD_6_4_BASE
Revision 1.73 / (download) - annotate - [select for diffs], Wed Aug 8 18:32:51 2018 UTC (5 years, 10 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE,
OPENBSD_6_4
Changes since 1.72: +49 -5 lines
Diff to previous 1.72 (colored)
After authentication is complete, unveil login.conf "r" (to discover login tweaks), and walk the path (would could be $PATH, or not) adding an unveil "x" to each possible executable which execvpe() could later be tried by execvpe. It would be great if we could do some unveil before authentication, but I failed to determine all the possibilities. Some problem reports by bluhm, tb, florian, and others during development In snaps for about 3 weeks. ok florian