Up to [local] / src / usr.bin / file
Request diff between arbitrary revisions
Default branch: MAIN
Current tag: HEAD
Revision 1.10, Sun Oct 4 07:25:59 2015 UTC (8 years, 8 months ago) by nicm
Branch: MAIN
CVS Tags: HEAD
Changes since 1.9: +1 -1 lines
FILE REMOVED
Add tame(2) to file(1) and drop the old systrace(4) sandbox. tame(2) is only applied to the child process, which requires the parent to not pass directory file descriptors (tame("cmsg") does not allow it). Because file(1) is already privsep, the permissions in the child can be quickly restricted: first to "stdio cmsg getpw proc" then after the privdrop to "stdio cmsg".