From 4626cbaf78767fc8e9c86dd04785386c59ae0839 Mon Sep 17 00:00:00 2001 From: Damien Miller Date: Fri, 8 Jan 2016 14:24:56 +1100 Subject: Support Illumos/Solaris fine-grained privileges Includes a pre-auth privsep sandbox and several pledge() emulations. bz#2511, patch by Alex Wilson. ok dtucker@ --- mux.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'mux.c') diff --git a/mux.c b/mux.c index 09704497f..f9c3af651 100644 --- a/mux.c +++ b/mux.c @@ -1891,6 +1891,7 @@ mux_client_request_session(int fd) if (pledge("stdio proc tty", NULL) == -1) fatal("%s pledge(): %s", __func__, strerror(errno)); + platform_pledge_mux(); signal(SIGHUP, control_client_sighandler); signal(SIGINT, control_client_sighandler); @@ -2001,6 +2002,7 @@ mux_client_request_stdio_fwd(int fd) if (pledge("stdio proc tty", NULL) == -1) fatal("%s pledge(): %s", __func__, strerror(errno)); + platform_pledge_mux(); debug3("%s: stdio forward request sent", __func__); -- cgit v1.2.3