CVSROOT: /cvs
Module name: src
Changes by: flor...@cvs.openbsd.org 2018/04/28 12:53:12
Modified files:
sbin/route : route.c show.c
Log message:
Improve / simplify pledges.
1) after schwarze@'s rampage (thanks!) we can drop rpath since asr is no
longer opening /etc/networks behind our back
2) we have the "route" pledge for the NET_RT_DUMP sysctl so we can
pledge earlier in main; flushroutes() and p_rttables() now tighten the
pledge instead of being the first pledge
3) the pledge in monitor() was just a repeat of the main() pledge, it
can go.
OK schwarze, deraadt
