mirror of
https://github.com/RGBCube/serenity
synced 2025-10-29 18:42:36 +00:00
Since this program is setuid-root, it should be as simple as possible. To that end, remove `/etc/plsusers` and use filesystem permissions to achieve the same thing. `/bin/pls` is now only executable by `root` or members of the `wheel` group. Also remove all the logic that went to great lengths to `unveil()` a minimal set of filesystem paths that may be used for the command. The complexity-to-benefit ratio did not seem justified, and I think we're better off keeping this simple. Finally, remove pledge promises the moment they are no longer needed. |
||
|---|---|---|
| .. | ||
| bin | ||
| include | ||
| lib | ||
| share/man | ||