Commit Diff
--- ChangeLog +++ ChangeLog @@ -1,3 +1,8 @@ +2022-02-13 Omar Polo <op@openbsd.org> + + * sandbox.c (filter): tightens seccomp policy wrt openat: allow + only with the O_RDONLY flag. + 2022-02-13 Tobias Berger <tobi.berger13@gmail.com> * sandbox.c (filter): allow fstatat64, llseek and sigreturn;