CVSROOT:        /cvs
Module name:    src
Changes by:     [email protected] 2015/10/02 23:36:34

Modified files:
        usr.bin/grep   : grep.c 

Log message:
grep only opens files read-only, reads via stdio or other methods, performs
computation, and outputs result to stdout.  (note: in the tame model,
malloc is implicit because stdio needs it, and mmap is implicit since
malloc needs it; libz is satisfied by this environment also).

this tame change consists of 1 line, setting "stdio rpath" before
getopt.  this protection is fairly strict.  grep could be improved
further by computing a wpathlist based on argv, keeping -R in mind.
feel free to take a shot at it.

grep was an early target of capsicum also.  know anyone running capsicum grep?

ok doug

Reply via email to