summaryrefslogtreecommitdiff
path: root/src/usr.sbin
diff options
context:
space:
mode:
authorbeck <>2021-07-12 15:09:21 +0000
committerbeck <>2021-07-12 15:09:21 +0000
commitdbd124eb250ac72aac05539d1367e15cf129f204 (patch)
tree61287a5a6562610dc26b24bad7d8d0ebf70eda8a /src/usr.sbin
parentdbfa1ee3062f3845905acb0e6e40da4f3169f04d (diff)
downloadopenbsd-dbd124eb250ac72aac05539d1367e15cf129f204.tar.gz
openbsd-dbd124eb250ac72aac05539d1367e15cf129f204.tar.bz2
openbsd-dbd124eb250ac72aac05539d1367e15cf129f204.zip
Change the error reporting pattern throughout the tree when unveil
fails to report the path that the failure occured on. Suggested by deraadt@ after some tech discussion. Work done and verified by Ashton Fagg <ashton@fagg.id.au> ok deraadt@ semarie@ claudio@
Diffstat (limited to 'src/usr.sbin')
-rw-r--r--src/usr.sbin/ocspcheck/ocspcheck.c8
1 files changed, 4 insertions, 4 deletions
diff --git a/src/usr.sbin/ocspcheck/ocspcheck.c b/src/usr.sbin/ocspcheck/ocspcheck.c
index 50f114f07c..46e7e66607 100644
--- a/src/usr.sbin/ocspcheck/ocspcheck.c
+++ b/src/usr.sbin/ocspcheck/ocspcheck.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: ocspcheck.c,v 1.29 2021/02/09 16:55:51 claudio Exp $ */ 1/* $OpenBSD: ocspcheck.c,v 1.30 2021/07/12 15:09:21 beck Exp $ */
2 2
3/* 3/*
4 * Copyright (c) 2017,2020 Bob Beck <beck@openbsd.org> 4 * Copyright (c) 2017,2020 Bob Beck <beck@openbsd.org>
@@ -617,14 +617,14 @@ main(int argc, char **argv)
617 617
618 if (cafile != NULL) { 618 if (cafile != NULL) {
619 if (unveil(cafile, "r") == -1) 619 if (unveil(cafile, "r") == -1)
620 err(1, "unveil"); 620 err(1, "unveil %s", cafile);
621 } 621 }
622 if (cadir != NULL) { 622 if (cadir != NULL) {
623 if (unveil(cadir, "r") == -1) 623 if (unveil(cadir, "r") == -1)
624 err(1, "unveil"); 624 err(1, "unveil %s", cadir);
625 } 625 }
626 if (unveil(certfile, "r") == -1) 626 if (unveil(certfile, "r") == -1)
627 err(1, "unveil"); 627 err(1, "unveil %s", certfile);
628 628
629 if (pledge("stdio inet rpath dns", NULL) == -1) 629 if (pledge("stdio inet rpath dns", NULL) == -1)
630 err(1, "pledge"); 630 err(1, "pledge");