diff options
author | Leah Rowe <leah@libreboot.org> | 2023-05-31 08:02:46 +0100 |
---|---|---|
committer | Leah Rowe <leah@libreboot.org> | 2023-05-31 08:02:46 +0100 |
commit | c2cd191676f5b491324d29484148c557dad548a5 (patch) | |
tree | be3b83047623444bd82f778a4a75e400d0dfd1b3 /resources/coreboot/default/patches/0012-set-me_state-Disabled-on-all-cmos.default-files.patch | |
parent | c759a7a0952556b078caf9c756f5db543efaabda (diff) |
util/nvmutil: Harden pledge promises
After reading a file, remove rpath.
When removing rpath, also remove wpath if flags
are not to O_RDONLY (read-only disk operation).
When wpath is permitted, and a file was successfully
written, remove wpath.
In order to permit /dev/urandom access in rhex(),
I call it as a void just before re-calling pledge.
The rhex() function has been written in such a way
that /dev/urandom only needs to be read *once*.
Signed-off-by: Leah Rowe <leah@libreboot.org>
Diffstat (limited to 'resources/coreboot/default/patches/0012-set-me_state-Disabled-on-all-cmos.default-files.patch')
0 files changed, 0 insertions, 0 deletions