CVSROOT: /cvs Module name: src Changes by: k...@cvs.openbsd.org 2019/12/28 11:36:02
Modified files:
usr.sbin/vmctl : main.c
usr.sbin/ldomctl: ldomctl.c
Log message:
Run cu(1) in restricted mode
Users must not not be able to transfer files from the local hypervisor
filesystem to VMs/LDOMs, especially since the "vmctl/ldomctl console ..."
might be run as root.
Disable all relevant escape sequences and cause cu to run under "stdio tty"
pledge by using -r.
OK deraadt mlarkin
