diff options
author | eadler <eadler@FreeBSD.org> | 2018-03-05 08:27:29 +0000 |
---|---|---|
committer | eadler <eadler@FreeBSD.org> | 2018-03-05 08:27:29 +0000 |
commit | 954376c06af82e0c879200cb1cc01b7e2b046958 (patch) | |
tree | 7fd74e107247c1452a098592a22f5ac128aa64a4 /usr.bin | |
parent | 6ac832625f895614b75de3cfaca9c7806dce2e1f (diff) | |
download | FreeBSD-src-954376c06af82e0c879200cb1cc01b7e2b046958.zip FreeBSD-src-954376c06af82e0c879200cb1cc01b7e2b046958.tar.gz |
MFC r311581:
Capsicum: add capability mode to users binary
Submitted by: Tyler Littlefield <tyler@tysdomain.com>
Reviewed by: cem, oshogbo
Differential Revision: https://reviews.freebsd.org/D9046
Diffstat (limited to 'usr.bin')
-rw-r--r-- | usr.bin/users/users.cc | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/usr.bin/users/users.cc b/usr.bin/users/users.cc index 914888d..2d47786 100644 --- a/usr.bin/users/users.cc +++ b/usr.bin/users/users.cc @@ -27,9 +27,12 @@ * SUCH DAMAGE. */ +#include <sys/capsicum.h> #include <sys/cdefs.h> __FBSDID("$FreeBSD$"); +#include <err.h> +#include <errno.h> #include <utmpx.h> #include <algorithm> @@ -51,6 +54,10 @@ main(int argc, char **) } setutxent(); + + if (cap_enter() < 0 && errno != ENOSYS) + err(1, "Failed to enter capability mode."); + while ((ut = getutxent()) != NULL) if (ut->ut_type == USER_PROCESS) names.insert(ut->ut_user); |