CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/03/07 11:27:52
Modified files:
usr.bin/ssh : ssh-sk-client.c
Log message:
Stop doing access() before execve(). It is a TOCTOU, but also it
forces use of unveil "rx" instead of "x".
This is done by using a pipe() through the fork+execve attempt to
expose execve failure and create the same error return as the access()
used to do.
ok djm dtucker
