CVSROOT: /cvs Module name: src Changes by: n...@cvs.openbsd.org 2015/04/27 07:52:17
Modified files:
usr.bin/file : Makefile file.c file.h
Added files:
usr.bin/file : sandbox.c
Log message:
Use a systrace(4) sandbox with a short whitelist of allowed syscalls for
the file(1) child process. Based on similar code in ssh sandbox-systrace.c.
Idea and help from deraadt@.
