CVSROOT: /cvs Module name: src Changes by: [email protected] 2023/10/09 09:32:14
Modified files:
sbin/ipsecctl : ipsecctl.c ipsecctl.h pfkey.c
Log message:
Add pledge("stdio") before parsing pfkey messages. This applies to
ipsecctl -m and ipsecctl -s. Refactor ipsecctl_show_*() to setup all
sysctls first before dropping privileges and finally parsing and
printing IPsec SAs and flows.
feedback and ok mbuhl@
ok deraadt@
