Return to 65.html CVS log | Up to [local] / www |
version 1.37, 2019/03/24 23:43:09 | version 1.38, 2019/03/25 00:11:07 | ||
---|---|---|---|
|
|
||
<li>Security improvements: | <li>Security improvements: | ||
<ul> | <ul> | ||
<li> | <li> | ||
unveil(2) has been improved to understand and find covering | <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> has been | ||
unveil matches above the working directory of running process | improved to understand and find covering unveil matches above the | ||
for relative path acesses. As a result many programs now can | working directory of the running process for relative path accesses. | ||
use unveil in broad ways such as unveil("/", "r"); | As a result many programs now can use unveil in broad ways such as | ||
unveil("/", "r"); | |||
<li> | <li> | ||
unveil(2) no longer silently allows stat(2) and access(2) to work on | <a href="https://man.openbsd.org/unveil.2">unveil(2)</a> no longer | ||
any unveiled path compoenent. | silently allows | ||
<a href="https://man.openbsd.org/stat.2">stat(2)</a> and | |||
<a href="https://man.openbsd.org/access.2">access(2)</a> to work on any | |||
unveiled path component. | |||
</ul> | </ul> | ||
<p> | <p> | ||