zehome / MLVPN

Multi-link VPN (ADSL/SDSL/xDSL/Network aggregation / bonding)
http://www.mlvpn.fr/
BSD 2-Clause "Simplified" License
521 stars 129 forks source link

OpenBSD pledge issue #128

Open rapenne-s opened 4 years ago

rapenne-s commented 4 years ago

On OpenBSD (development version of 23/03/2020) with mlvpn-2.3.4 I have a pledge issue which disappear if I uncomment the following code in src/privsep.c

https://github.com/zehome/MLVPN/blob/master/src/privsep.c#L192

 #ifdef HAVE_PLEDGE
        if (pledge("stdio inet unix recvfd", NULL) != 0) {
             err(1, "pledge");
        }
 #endif

In dmesg output I see a pledge violation due to "inet"

mlvpn[3378]: pledge "inet", syscall 105

I can't really explain it as inet is in the promises list of the pledge call.