Re: unveil(2) relayd(8)'s main proc, now for real

2020-06-19 Thread Sebastian Benoit
Ricardo Mestre(ser...@helheim.mooo.com) on 2020.06.18 23:40:54 +0100: > Hi, > > Yes, this is a really broad permission to give but it's needed in order to > read > the config file (and those ones included from it) and also to exec the "check > script(s)" which I missed in my last attempt to unvei

unveil(2) relayd(8)'s main proc, now for real

2020-06-18 Thread Ricardo Mestre
Hi, Yes, this is a really broad permission to give but it's needed in order to read the config file (and those ones included from it) and also to exec the "check script(s)" which I missed in my last attempt to unveil(2) relayd(8). The reason it cannot be pledge(2)d is due to forbidden ioctls(2)s