CVSROOT: /cvs Module name: src Changes by: [email protected] 2018/08/06 00:30:06
Modified files:
sbin/iked : control.c iked.h proc.c
Log message:
Remove cpath pledge(2) promise. We decided that not deleting the unix control
sockets cause no harm and this way we close another attack surface by not
allowing the daemon to create/delete any more files.
OK kn@
