CVSROOT: /cvs Module name: src Changes by: dera...@cvs.openbsd.org 2019/08/28 14:03:51
Modified files:
sbin/ping : ping.c
usr.sbin/traceroute: traceroute.c
Log message:
At startup, unveil entire filesystem to read-only. If after privdrop, some
implausible bug existed in the socket setup (mostly dns-related and
setsockopt) it would be largely neutered. of course, a very restrictive
pledge is installed soon after that...
ok mestre brynet florian
