CVSROOT: /cvs
Module name: src
Changes by: mes...@cvs.openbsd.org 2018/11/13 00:29:07
Modified files:
usr.sbin/snmpd : snmpe.c
Log message:
Remove #if'ed 0 code around a broken pledge. Due to some ioctls and sysctls
pledge cannot be used, nevertheless since we now have unveil available we can
use it to guarantee that in this particular case the snmpe process cannot
access the filesystem at all, therefore close a big attack vector and achieve
a great level of protection even without being able to use pledge.
prodded by deraadt@
