CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/06/01 10:33:49
Modified files:
sys/kern : kern_acct.c vfs_syscalls.c
Log message:
acct(8) and quotactl(8) can see files beyond unveil. These are root-only
system calls, also obviously blocked by all pledge.
However there is a circumstance of root running with unveil but without pledge
(quite rare in the tree) and there are some gaps. These two fixes are a
stopgap because I think we should re-design how namei handles this.
>From ivan at Quarkslab
ok dgl
