CVSROOT: /cvs Module name: src Changes by: [email protected] 2016/03/04 09:48:13
Modified files:
sbin/mknod : mknod.c
Log message:
Invert the pledge() condition.
The only case where we don't want to pledge() is when a mode containing
the suid, sgid or sticky is is passed on the command line. mknod() in a
pledged binary would always strip those bits.
discussion and ok espie@
ok deraadt@ semarie@ tb@
