Klemens Nanni b16a3b0d43 Use unveil(2) on OpenBSD ... After #1175 removed ioctl(2) fallback code shelling out to ifconfig(8), there is no code left (compiled on OpenBSD) that would fork(2) or execve(2). Drop the ability to run any executable file to double down on this, thus reducing the attack surface of this this experimental, internet facing daemon running as root. pledge(2) is doable, but needs more polish. unveil(2), however, is as simple as it gets. On other systems, this code is a NOOP, but can still help to implement similar safety belts.		2024-11-03 03:07:54 +03:00
..
chuser_other.go	argument to change uid/gid (#927)	2024-09-22 15:46:54 +00:00
chuser_unix.go	argument to change uid/gid (#927)	2024-09-22 15:46:54 +00:00
main.go	Use unveil(2) on OpenBSD	2024-11-03 03:07:54 +03:00