From 68f41009e9283757b672bbafcaa7bb0bdd121e32 Mon Sep 17 00:00:00 2001 From: June McEnroe Date: Wed, 15 Sep 2021 13:13:11 +0000 Subject: Enter capsicum in downgrade --- bin/downgrade.c | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/bin/downgrade.c b/bin/downgrade.c index 5351c501..af1b528b 100644 --- a/bin/downgrade.c +++ b/bin/downgrade.c @@ -26,6 +26,10 @@ #include #include +#ifdef __FreeBSD__ +#include +#endif + enum { BufferCap = 8192 + 512 }; static bool verbose; @@ -298,6 +302,11 @@ int main(int argc, char *argv[]) { if (error) errx(EX_PROTOCOL, "tls_handshake: %s", tls_error(client)); tls_config_clear_keys(config); +#ifdef __FreeBSD__ + error = caph_enter() || caph_limit_stdio(); + if (error) err(EX_OSERR, "caph_enter"); +#endif + signal(SIGHUP, quit); signal(SIGINT, quit); signal(SIGTERM, quit); -- cgit 1.4.1 ki DON'T USE THIS! --- web frontend for git
about summary refs log tree commit diff
Commit message (Collapse)Author
2009-06-11add cgit_httpscheme() -> http:// or https://Diego Ongaro
2009-06-07Return http statuscode 404 on unknown branchLars Hjemli
Signed-off-by: Lars Hjemli <hjemli@gmail.com>
2009-03-15CGIT 0.8.2.1Lars Hjemli
Signed-off-by: Lars Hjemli <hjemli@gmail.com>
2009-03-15Fix doc-related glitches in Makefile and .gitignoreLars Hjemli
Signed-off-by: Lars Hjemli <hjemli@gmail.com>
2009-03-15ui-snapshot: avoid segfault when no filename is specifiedLars Hjemli
Signed-off-by: Lars Hjemli <hjemli@gmail.com>
2009-03-15fix segfault when displaying empty blobsEric Wong
When size is zero, subtracting one from it turns it into ULONG_MAX which causes an out-of-bounds access on buf. Signed-off-by: Eric Wong <normalperson@yhbt.net> Signed-off-by: Lars Hjemli <hjemli@gmail.com>
2009-02-12ui-tree: escape ascii-text properly in hexdump viewLars Hjemli
Signed-off-by: Lars Hjemli <hjemli@gmail.com>
2009-02-12Makefile: add doc-related targetsLars Hjemli