Re: [testing] exim-4.94 without pledge

2021-03-27 Thread Renaud Allard
On 16/03/2021 18:18, Renaud Allard wrote: On 16/03/2021 17:46, Stuart Henderson wrote: Exim has a big monolothic process design and lots of optional features many of which pull in third party libraries which are complex themselves (and *also* will have to deal with the same pledge restricti

Re: [testing] exim-4.94 without pledge

2021-03-27 Thread Stuart Henderson
On 2021/03/27 14:37, Renaud Allard wrote: > > > > So, here is a diff without pledge but with the SIOCGIFCONF call removed > > as this should really be tested. > > I haven't had anyone complaining or telling OK about this patch. I haven't > had any crash or bug myself with it. So, maybe nobody tes

Re: [testing] exim-4.94 without pledge

2021-03-16 Thread Renaud Allard
On 16/03/2021 17:46, Stuart Henderson wrote: Exim has a big monolothic process design and lots of optional features many of which pull in third party libraries which are complex themselves (and *also* will have to deal with the same pledge restrictions which again may vary in what functions th

Re: [testing] exim-4.94 without pledge

2021-03-16 Thread Theo de Raadt
Stuart Henderson wrote: > > In fact, I scanned the code looking for calls, so this should be ready for > > general use. I could have restricted it way more for my own use only. > > Though, I agree, this only protects from a very limited subset like route, > > settime, pf, audio, video. > > Even

Re: [testing] exim-4.94 without pledge

2021-03-16 Thread Stuart Henderson
On 2021/03/16 18:18, Renaud Allard wrote: > > > On 16/03/2021 17:46, Stuart Henderson wrote: > > > Exim has a big monolothic process design and lots of optional features > > many of which pull in third party libraries which are complex themselves > > (and *also* will have to deal with the same p