On Sun, Jul 23 2017, Jeremie Courreges-Anglas <j...@openbsd.org> wrote: > CVSROOT: /cvs > Module name: src > Changes by: j...@cvs.openbsd.org 2017/07/23 08:28:22 > > Modified files: > sbin/pflogd : pflogd.c > > Log message: > Don't hit pledge(2) restrictions on interface departure > > if_exists() can't be used after dropping privileges, since it uses > socket(2) and ioctl(SIOCGIFDATA). We're just trying to know whether an > interface exists, and if_nametoindex(3) is enough for that. > > ok deraadt@
also ok benno@ -- jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
