Re: unveil(2): new corner case: failure on using a directory if not already exists

2019-06-08 Thread Theo de Raadt
> solene@ reported on ports an error with unveil(2) on creating > subdirectories on previously not existent directory, for a port she > tried to unveiled. Step back for a moment. Let's say you are allowed to create such directories. Is that a safe thing to provide? Non-existant was only suppose

Re: unveil(2): new corner case: failure on using a directory if not already exists

2019-06-08 Thread Bob Beck
We should clarify the man page. trying to think about wording. On Sat, Jun 8, 2019 at 01:10 Theo de Raadt wrote: > > solene@ reported on ports an error with unveil(2) on creating > > subdirectories on previously not existent directory, for a port she > > tried to unveiled. > > Step back for a m

unveil: nonexistent files on read-only filesystem yield EROFS

2019-06-08 Thread Klemens Nanni
kern.version=OpenBSD 6.5-current (GENERIC.MP) #6: Tue Jun 4 15:05:10 MDT 2019 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP Unveiling nonexistent files on read-only filesystems always results in EROFS regardless of permissions: $ mount | grep '/usr ' /

Re: unveil: nonexistent files on read-only filesystem yield EROFS

2019-06-08 Thread Bryan Steele
semarie@ reported this last year. https://marc.info/?t=15405585705&r=1&w=2 On Sat, Jun 08, 2019 at 03:12:19PM +0200, Klemens Nanni wrote: > kern.version=OpenBSD 6.5-current (GENERIC.MP) #6: Tue Jun 4 15:05:10 MDT 2019 > dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP