does rad(8) actually need rpath here? as far as i can see it needs to open the
config, plus its includes, but that is already done before pledge(2) by imsg
sending IMSG_RECONF_CONF.
florian@ is this correct or am i trusting too much on my eyes?
Index: rad.c
===================================================================
RCS file: /cvs/src/usr.sbin/rad/rad.c,v
retrieving revision 1.27
diff -u -p -u -r1.27 rad.c
--- rad.c 27 Feb 2021 10:35:20 -0000 1.27
+++ rad.c 23 Oct 2021 17:47:22 -0000
@@ -283,7 +283,7 @@ main(int argc, char *argv[])
main_imsg_compose_frontend(IMSG_CONTROLFD, control_fd, NULL, 0);
main_imsg_send_config(main_conf);
- if (pledge("stdio inet rpath sendfd mcast wroute", NULL) == -1)
+ if (pledge("stdio inet sendfd mcast wroute", NULL) == -1)
fatal("pledge");
main_imsg_compose_frontend(IMSG_STARTUP, -1, NULL, 0);