CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/03/14 05:25:40
Modified files:
usr.sbin/vmd : vmm.c
Log message:
Fix vmd(8) pledge violation when opening /dev/null.
The "vmm" process responsible for vm process creation uses /dev/null
for std{in,out,err} if running daemonized. Where it was opening
/dev/null is no longer supported by its current set of pledges.
Instead of expanding pledge scope, open /dev/null early prior to
unveil(2) and reuse the same file descriptor if needed.
This resolves the pledge violation reported by Nikita Kandinov and
removes the need to call open(2) for every created vm.
ok deraadt@, bluhm@
