mirror of
https://github.com/RGBCube/serenity
synced 2025-07-02 20:02:12 +00:00
![]() Since this program is setuid-root, it should be as simple as possible. To that end, remove `/etc/plsusers` and use filesystem permissions to achieve the same thing. `/bin/pls` is now only executable by `root` or members of the `wheel` group. Also remove all the logic that went to great lengths to `unveil()` a minimal set of filesystem paths that may be used for the command. The complexity-to-benefit ratio did not seem justified, and I think we're better off keeping this simple. Finally, remove pledge promises the moment they are no longer needed. |
||
---|---|---|
.. | ||
man1 | ||
man2 | ||
man3 | ||
man4 | ||
man5 | ||
man7 | ||
man8 |