CVSROOT: /cvs Module name: src Changes by: bry...@cvs.openbsd.org 2017/09/08 13:10:57
Modified files:
usr.sbin/tcpdump: privsep.c privsep.h tcpdump.c
Log message:
fork+exec model for tcpdump(8); re-exec the privileged child after fork
While tcpdump isn't a daemon in the traditional sense, it's not uncommon
for people to have long running sessions. At least on OpenBSD, this is
even safe thanks to the existing privsep design by otto@, canacar@ and
pledge(2) work done by deraadt.
ok deraadt@
