svn commit: r308432 - in head: bin/echo bin/sleep usr.bin/basename usr.bin/dc usr.bin/dirname usr.bin/fold usr.bin/getopt usr.bin/locate/bigram usr.bin/logname usr.bin/printenv usr.bin/yes
Conrad Meyer
cem at freebsd.org
Tue Nov 15 00:24:52 UTC 2016
On Mon, Nov 14, 2016 at 5:25 AM, Jean-Sébastien Pédron
<dumbbell at freebsd.org> wrote:
> On 08.11.2016 06:31, Conrad E. Meyer wrote:
>> Author: cem
>> Date: Tue Nov 8 05:31:01 2016
>> New Revision: 308432
>> URL: https://svnweb.freebsd.org/changeset/base/308432
>>
>> Log:
>> Capsicumize some trivial stdio programs
>>
>> Trivially capsicumize some simple programs that just interact with
>> stdio. This list of programs uses 'pledge("stdio")' in OpenBSD.
>
> Hi!
>
> fold(1) is broken after this commit:
>
> fold -s src/rabbit_ctl_usage.erl.tmp2
> fold: src/rabbit_ctl_usage.erl.tmp2: Not permitted in capability mode
>
> I don't know how Capsicum works, but fold(1) works with files in
> addition to stdio, so perhaps caph_limit_stdio() is incorrect for this
> program.
Hi,
Yes, this program is incorrectly capsicumized. My mistake. I have
reverted the change to fold(1) in r308657.
Thanks,
Conrad
More information about the svn-src-all
mailing list