Date: Mon, 14 Nov 2016 16:24:49 -0800 From: Conrad Meyer <cem@freebsd.org> To: =?UTF-8?B?SmVhbi1Tw6liYXN0aWVuIFDDqWRyb24=?= <dumbbell@freebsd.org> Cc: src-committers <src-committers@freebsd.org>, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: Re: svn commit: r308432 - in head: bin/echo bin/sleep usr.bin/basename usr.bin/dc usr.bin/dirname usr.bin/fold usr.bin/getopt usr.bin/locate/bigram usr.bin/logname usr.bin/printenv usr.bin/yes Message-ID: <CAG6CVpX0A5MC7Ckifb0UmzrYj1Pit=SOz8APDq4oNAygbcYKgQ@mail.gmail.com> In-Reply-To: <d66219dd-7ff7-2251-7fba-4d04e6ea7176@FreeBSD.org> References: <201611080531.uA85V2DL025382@repo.freebsd.org> <d66219dd-7ff7-2251-7fba-4d04e6ea7176@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Nov 14, 2016 at 5:25 AM, Jean-S=C3=A9bastien P=C3=A9dron <dumbbell@freebsd.org> wrote: > On 08.11.2016 06:31, Conrad E. Meyer wrote: >> Author: cem >> Date: Tue Nov 8 05:31:01 2016 >> New Revision: 308432 >> URL: https://svnweb.freebsd.org/changeset/base/308432 >> >> Log: >> Capsicumize some trivial stdio programs >> >> Trivially capsicumize some simple programs that just interact with >> stdio. This list of programs uses 'pledge("stdio")' in OpenBSD. > > Hi! > > fold(1) is broken after this commit: > > fold -s src/rabbit_ctl_usage.erl.tmp2 > fold: src/rabbit_ctl_usage.erl.tmp2: Not permitted in capability mode > > I don't know how Capsicum works, but fold(1) works with files in > addition to stdio, so perhaps caph_limit_stdio() is incorrect for this > program. Hi, Yes, this program is incorrectly capsicumized. My mistake. I have reverted the change to fold(1) in r308657. Thanks, Conrad
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAG6CVpX0A5MC7Ckifb0UmzrYj1Pit=SOz8APDq4oNAygbcYKgQ>