Up to [local] / src / usr.bin / file
Request diff between arbitrary revisions
Default branch: MAIN
Current tag: OPENBSD_5_9_BASE
Revision 1.29 / (download) - annotate - [select for diffs], Mon Apr 27 13:52:17 2015 UTC (9 years, 1 month ago) by nicm
Branch: MAIN
CVS Tags: OPENBSD_5_9_BASE,
OPENBSD_5_9,
OPENBSD_5_8_BASE,
OPENBSD_5_8
Changes since 1.28: +4 -1 lines
Diff to previous 1.28 (colored)
Use a systrace(4) sandbox with a short whitelist of allowed syscalls for the file(1) child process. Based on similar code in ssh sandbox-systrace.c. Idea and help from deraadt@.