summaryrefslogtreecommitdiff
path: root/blobs
diff options
context:
space:
mode:
authorLeah Rowe <leah@libreboot.org>2023-05-31 08:02:46 +0100
committerLeah Rowe <leah@libreboot.org>2023-05-31 08:02:46 +0100
commitc2cd191676f5b491324d29484148c557dad548a5 (patch)
treebe3b83047623444bd82f778a4a75e400d0dfd1b3 /blobs
parentc759a7a0952556b078caf9c756f5db543efaabda (diff)
util/nvmutil: Harden pledge promises
After reading a file, remove rpath. When removing rpath, also remove wpath if flags are not to O_RDONLY (read-only disk operation). When wpath is permitted, and a file was successfully written, remove wpath. In order to permit /dev/urandom access in rhex(), I call it as a void just before re-calling pledge. The rhex() function has been written in such a way that /dev/urandom only needs to be read *once*. Signed-off-by: Leah Rowe <leah@libreboot.org>
Diffstat (limited to 'blobs')
0 files changed, 0 insertions, 0 deletions