diff options
| author | Jan Bramkamp <crest+freebsd@rlwinm.de> | 2026-05-06 23:28:53 +0000 |
|---|---|---|
| committer | Kyle Evans <kevans@FreeBSD.org> | 2026-06-10 04:00:47 +0000 |
| commit | ee07da0c1e95d307d5120ac6a8a0ea5ccb88e61b (patch) | |
| tree | a63c4e9d5f5da496d007397591c1216eea6442ca | |
| parent | 0de1f3a8aa7f5e99aa63bcd76dfa3fd7e017d295 (diff) | |
jail: open the fstab files with fopen("re")
This protects against accidentally leaking them past fork()+exec()
in future refactorings.
PR: 295052
Reviewed by: kevans
(cherry picked from commit 58811b0ae096c134af372bcf475aea1d8d0e3c08)
| -rw-r--r-- | usr.sbin/jail/config.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/usr.sbin/jail/config.c b/usr.sbin/jail/config.c index 5cf2e34a8340..e5aef24f6386 100644 --- a/usr.sbin/jail/config.c +++ b/usr.sbin/jail/config.c @@ -726,7 +726,7 @@ check_intparams(struct cfjail *j) TAILQ_FOREACH(s, &j->intparams[IP_MOUNT_FSTAB]->val, tq) { if (s->len == 0) continue; - f = fopen(s->s, "r"); + f = fopen(s->s, "re"); if (f == NULL) { jail_warnx(j, "mount.fstab: %s: %s", s->s, strerror(errno)); |