Tighten pledge
pigz starts with "stdio rpath wpath cpath fattr chown" like base gzip(1). For `g.pipeout' aka. -c --stdout and `g.decode == 2' aka. -t --test, pigz drops to "stdio rpath cpath" while gzip uses "stdio rpath". The original pledge diff added "cpath" for the case where pigz's signal handler unlink(2)s output files, but this is actually not needed since -c and -t never open any file for output/writing. Drop "cpath" to match gzip behaviour. Do the same for `g.list' aka. -l --list.
This commit is contained in:
parent
a3166ccfac
commit
8cf4361551
|
@ -6,7 +6,7 @@ COMMENT = parallel implementation of gzip utilizing multiple cores
|
|||
DISTNAME = pigz-2.7
|
||||
CATEGORIES = archivers
|
||||
HOMEPAGE = https://zlib.net/pigz/
|
||||
REVISION = 0
|
||||
REVISION = 1
|
||||
|
||||
MAINTAINER = Klemens Nanni <kn@openbsd.org>
|
||||
|
||||
|
|
|
@ -33,8 +33,8 @@ Index: pigz.c
|
|||
argv[n] = NULL; // remove if option
|
||||
option(NULL); // check for missing parameter
|
||||
+
|
||||
+ if (g.pipeout || g.decode == 2)
|
||||
+ if (pledge("stdio rpath cpath", NULL) == -1) {
|
||||
+ if (g.pipeout || g.decode == 2 || g.list)
|
||||
+ if (pledge("stdio rpath", NULL) == -1) {
|
||||
+ complain("pledge");
|
||||
+ exit(1);
|
||||
+ }
|
||||
|
|
Loading…
Reference in New Issue