commit 4844aeaffb183685ca8a19f390f5468707fd038b
from: Omar Polo <op@omarpolo.com>
date: Wed Jul 06 12:46:59 2022 UTC

unveil only ssh(1)

commit - 039c0887cbf563243da7a5bb88a75564c2edbaf7
commit + 4844aeaffb183685ca8a19f390f5468707fd038b
blob - 1097d9ab735a90fe45c73153e4a7abce11efed35
blob + 8c56f86d766d0657350427f9e6358550c5bb0354
--- lstun.c
+++ lstun.c
@@ -44,6 +44,7 @@
 
 #ifndef __OpenBSD__
 #define pledge(p, e) 0
+#define unveil(p, m) 0
 #endif
 
 const char	*addr;		/* our addr */
@@ -520,6 +521,9 @@ main(int argc, char **argv)
 		    do_accept, NULL);
 		event_add(&sockev[i], NULL);
 	}
+
+	if (unveil(SSH_PATH, "x") == -1)
+		fatal("unveil(%s)", SSH_PATH);
 
 	/*
 	 * dns, inet: bind the socket and connect to the childs.