CVSROOT: /cvs Module name: src Changes by: mes...@cvs.openbsd.org 2018/08/04 05:07:14
Modified files: usr.sbin/ntpd : control.c ntpd.c ntpd.h Log message: Revert back previous commit, we have decided that socket files don't cause any harm if not deleted after the daemon is shutdown and at the same time we also tackle another attack surface by not allowing the program to create/delete any more files (by removing "cpath" promise from pledge(2)). Discussion initiated by a question from deraadt@ OK florian@