CVS: cvs.openbsd.org: src

Theo Buehler <[email protected]> Fri, 7 Aug 2026 07:26:23 -0600 (MDT)

Newsgroups	gmane.os.openbsd.cvs
Message-ID	<[email protected]>

CVSROOT:	/cvs
Module name:	src
Changes by:	[email protected]	2026/08/07 07:26:23

Modified files:
	usr.bin/pkgconf/cli: core.c 
	usr.bin/pkgconf/libpkgconf: pkg.c 

Log message:
pkgconf: simplify unveil handling

Instead of giving fine-grained read access by iterating, use a simple
unveil("/", "r"). pkgconf runs with pledge "stdio rpath wpath cpath unveil"
with closed unveil, and only /dev/null and an optional log file have "rwc".

discussed with deraadt a long time ago, agreement by claudio
ok sthen