aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJan Bramkamp <crest+freebsd@rlwinm.de>2026-05-06 23:28:53 +0000
committerKyle Evans <kevans@FreeBSD.org>2026-05-06 23:28:53 +0000
commit58811b0ae096c134af372bcf475aea1d8d0e3c08 (patch)
tree096eaff1b0c5de2cd76d534f328172002443bb73
parent276d9b88a9e6fd6fd90e57c36444756ad297d2ab (diff)
jail: open the fstab files with fopen("re")
This protects against accidentally leaking them past fork()+exec() in future refactorings. PR: 295052 Reviewed by: kevans
-rw-r--r--usr.sbin/jail/config.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/usr.sbin/jail/config.c b/usr.sbin/jail/config.c
index f1e2da215790..188f48732561 100644
--- a/usr.sbin/jail/config.c
+++ b/usr.sbin/jail/config.c
@@ -726,7 +726,7 @@ check_intparams(struct cfjail *j)
TAILQ_FOREACH(s, &j->intparams[IP_MOUNT_FSTAB]->val, tq) {
if (s->len == 0)
continue;
- f = fopen(s->s, "r");
+ f = fopen(s->s, "re");
if (f == NULL) {
jail_warnx(j, "mount.fstab: %s: %s",
s->s, strerror(errno));