===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/rsync/receiver.c,v
retrieving revision 1.11
retrieving revision 1.12
diff -c -r1.11 -r1.12
*** src/usr.bin/rsync/receiver.c	2019/02/16 05:30:28	1.11
--- src/usr.bin/rsync/receiver.c	2019/02/16 10:44:01	1.12
***************
*** 1,4 ****
! /*	$Id: receiver.c,v 1.11 2019/02/16 05:30:28 deraadt Exp $ */
  
  /*
   * Copyright (c) 2019 Kristaps Dzonsons <kristaps@bsd.lv>
--- 1,4 ----
! /*	$Id: receiver.c,v 1.12 2019/02/16 10:44:01 florian Exp $ */
  
  /*
   * Copyright (c) 2019 Kristaps Dzonsons <kristaps@bsd.lv>
***************
*** 92,99 ****
  }
  
  /*
!  * Pledges: unveil, rpath, cpath, wpath, stdio, fattr.
!  * Pledges (dry-run): -cpath, -wpath, -fattr.
   */
  int
  rsync_receiver(struct sess *sess, int fdin, int fdout, const char *root)
--- 92,99 ----
  }
  
  /*
!  * Pledges: unveil, rpath, cpath, wpath, stdio, fattr, chown.
!  * Pledges (dry-run): -cpath, -wpath, -fattr, -chown.
   */
  int
  rsync_receiver(struct sess *sess, int fdin, int fdout, const char *root)
***************
*** 108,114 ****
  	struct upload	*ul = NULL;
  	mode_t		 oumask;
  
! 	if (pledge("stdio rpath wpath cpath fattr getpw unveil", NULL) == -1) {
  		ERR(sess, "pledge");
  		goto out;
  	}
--- 108,114 ----
  	struct upload	*ul = NULL;
  	mode_t		 oumask;
  
! 	if (pledge("stdio rpath wpath cpath fattr chown getpw unveil", NULL) == -1) {
  		ERR(sess, "pledge");
  		goto out;
  	}