diff options
| author | Leah Rowe <leah@libreboot.org> | 2023-05-31 08:02:46 +0100 |
|---|---|---|
| committer | Leah Rowe <leah@libreboot.org> | 2023-05-31 08:02:46 +0100 |
| commit | c2cd191676f5b491324d29484148c557dad548a5 (patch) | |
| tree | be3b83047623444bd82f778a4a75e400d0dfd1b3 /resources/coreboot/x301_16mb/config/libgfxinit_txtmode | |
| parent | c759a7a0952556b078caf9c756f5db543efaabda (diff) | |
util/nvmutil: Harden pledge promises
After reading a file, remove rpath.
When removing rpath, also remove wpath if flags
are not to O_RDONLY (read-only disk operation).
When wpath is permitted, and a file was successfully
written, remove wpath.
In order to permit /dev/urandom access in rhex(),
I call it as a void just before re-calling pledge.
The rhex() function has been written in such a way
that /dev/urandom only needs to be read *once*.
Signed-off-by: Leah Rowe <leah@libreboot.org>
Diffstat (limited to 'resources/coreboot/x301_16mb/config/libgfxinit_txtmode')
0 files changed, 0 insertions, 0 deletions