svn commit: r308432 - in head: bin/echo bin/sleep usr.bin/basename usr.bin/dc usr.bin/dirname usr.bin/fold usr.bin/getopt usr.bin/locate/bigram usr.bin/logname usr.bin/printenv usr.bin/yes

Conrad Meyer cem at freebsd.org
Tue Nov 15 00:24:52 UTC 2016


On Mon, Nov 14, 2016 at 5:25 AM, Jean-Sébastien Pédron
<dumbbell at freebsd.org> wrote:
> On 08.11.2016 06:31, Conrad E. Meyer wrote:
>> Author: cem
>> Date: Tue Nov  8 05:31:01 2016
>> New Revision: 308432
>> URL: https://svnweb.freebsd.org/changeset/base/308432
>>
>> Log:
>>   Capsicumize some trivial stdio programs
>>
>>   Trivially capsicumize some simple programs that just interact with
>>   stdio.  This list of programs uses 'pledge("stdio")' in OpenBSD.
>
> Hi!
>
> fold(1) is broken after this commit:
>
> fold -s src/rabbit_ctl_usage.erl.tmp2
> fold: src/rabbit_ctl_usage.erl.tmp2: Not permitted in capability mode
>
> I don't know how Capsicum works, but fold(1) works with files in
> addition to stdio, so perhaps caph_limit_stdio() is incorrect for this
> program.

Hi,

Yes, this program is incorrectly capsicumized.  My mistake.  I have
reverted the change to fold(1) in r308657.

Thanks,
Conrad


More information about the svn-src-head mailing list