diff options
| author | beck <> | 2021-07-12 15:09:21 +0000 |
|---|---|---|
| committer | beck <> | 2021-07-12 15:09:21 +0000 |
| commit | dbd124eb250ac72aac05539d1367e15cf129f204 (patch) | |
| tree | 61287a5a6562610dc26b24bad7d8d0ebf70eda8a /src/usr.sbin/ocspcheck | |
| parent | dbfa1ee3062f3845905acb0e6e40da4f3169f04d (diff) | |
| download | openbsd-dbd124eb250ac72aac05539d1367e15cf129f204.tar.gz openbsd-dbd124eb250ac72aac05539d1367e15cf129f204.tar.bz2 openbsd-dbd124eb250ac72aac05539d1367e15cf129f204.zip | |
Change the error reporting pattern throughout the tree when unveil
fails to report the path that the failure occured on. Suggested by
deraadt@ after some tech discussion.
Work done and verified by Ashton Fagg <ashton@fagg.id.au>
ok deraadt@ semarie@ claudio@
Diffstat (limited to 'src/usr.sbin/ocspcheck')
| -rw-r--r-- | src/usr.sbin/ocspcheck/ocspcheck.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/src/usr.sbin/ocspcheck/ocspcheck.c b/src/usr.sbin/ocspcheck/ocspcheck.c index 50f114f07c..46e7e66607 100644 --- a/src/usr.sbin/ocspcheck/ocspcheck.c +++ b/src/usr.sbin/ocspcheck/ocspcheck.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: ocspcheck.c,v 1.29 2021/02/09 16:55:51 claudio Exp $ */ | 1 | /* $OpenBSD: ocspcheck.c,v 1.30 2021/07/12 15:09:21 beck Exp $ */ |
| 2 | 2 | ||
| 3 | /* | 3 | /* |
| 4 | * Copyright (c) 2017,2020 Bob Beck <beck@openbsd.org> | 4 | * Copyright (c) 2017,2020 Bob Beck <beck@openbsd.org> |
| @@ -617,14 +617,14 @@ main(int argc, char **argv) | |||
| 617 | 617 | ||
| 618 | if (cafile != NULL) { | 618 | if (cafile != NULL) { |
| 619 | if (unveil(cafile, "r") == -1) | 619 | if (unveil(cafile, "r") == -1) |
| 620 | err(1, "unveil"); | 620 | err(1, "unveil %s", cafile); |
| 621 | } | 621 | } |
| 622 | if (cadir != NULL) { | 622 | if (cadir != NULL) { |
| 623 | if (unveil(cadir, "r") == -1) | 623 | if (unveil(cadir, "r") == -1) |
| 624 | err(1, "unveil"); | 624 | err(1, "unveil %s", cadir); |
| 625 | } | 625 | } |
| 626 | if (unveil(certfile, "r") == -1) | 626 | if (unveil(certfile, "r") == -1) |
| 627 | err(1, "unveil"); | 627 | err(1, "unveil %s", certfile); |
| 628 | 628 | ||
| 629 | if (pledge("stdio inet rpath dns", NULL) == -1) | 629 | if (pledge("stdio inet rpath dns", NULL) == -1) |
| 630 | err(1, "pledge"); | 630 | err(1, "pledge"); |
