From 55f0e6ac8e540cea24af64070bfc49a032729511 Mon Sep 17 00:00:00 2001 From: Leah Rowe Date: Sat, 28 Mar 2026 05:48:45 +0000 Subject: libreboot-utils: simplified pledge/unveil usage i no longer care about openbsd 5.9. we assume unveil is available, as has been the case for the past 12 years. i use wrappers for unveil and pledge, which means that i call them on every os. on OSes that don't have these, i just return. it's somewhat inelegant, but also means that i see errors more easily, e.g. misnamed variables inside previous ifdef OpenBSD blocks. Signed-off-by: Leah Rowe --- util/libreboot-utils/lib/string.c | 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) (limited to 'util/libreboot-utils/lib/string.c') diff --git a/util/libreboot-utils/lib/string.c b/util/libreboot-utils/lib/string.c index 986c7b8e..dd11c039 100644 --- a/util/libreboot-utils/lib/string.c +++ b/util/libreboot-utils/lib/string.c @@ -294,12 +294,6 @@ err_no_cleanup(int stfu, int nvm_errval, const char *msg, ...) int saved_errno = errno; const char *p; -#if defined(__OpenBSD__) && defined(OpenBSD) -#if (OpenBSD) >= 509 - if (pledge("stdio", NULL) == -1) - fprintf(stderr, "pledge failure during exit"); -#endif -#endif if (!errno) saved_errno = errno = ECANCELED; @@ -363,6 +357,8 @@ lbgetprogname(char *argv0) return progname; } +/* https://man.openbsd.org/pledge.2 + https://man.openbsd.org/unveil.2 */ int xpledgex(const char *promises, const char *execpromises) { @@ -375,7 +371,6 @@ xpledgex(const char *promises, const char *execpromises) errno = saved_errno; return 0; } - int xunveilx(const char *path, const char *permissions) { -- cgit v1.2.1