Re: ipsecctl(8): pledge stdio before parsing pfkey

2023-10-09 Thread Tobias Heider
On Mon, Oct 09, 2023 at 12:29:43AM +0200, Tobias Heider wrote: > The diff below adds pledge("stdio") calls for the pfkey dump subset > of ipsecctl commands. > > In particular ipsecctl -s which prints all SAs or flows in the kernel > and more importantly ipsecctl -m which contiously parses and prin

ipsecctl(8): pledge stdio before parsing pfkey

2023-10-08 Thread Tobias Heider
The diff below adds pledge("stdio") calls for the pfkey dump subset of ipsecctl commands. In particular ipsecctl -s which prints all SAs or flows in the kernel and more importantly ipsecctl -m which contiously parses and prints every pfkey message forwarded by the kernel don't seem to need any add