changeset 5214:7615b4eec51c draft

Update comment for capsicum
author Roy Marples <roy@marples.name>
date Tue, 12 May 2020 11:46:19 +0100
parents 28f03f422541
children c246c5e40b03
files src/dhcpcd.c
diffstat 1 files changed, 6 insertions(+), 4 deletions(-) [+]
line wrap: on
line diff
--- a/src/dhcpcd.c	Tue May 12 11:35:28 2020 +0100
+++ b/src/dhcpcd.c	Tue May 12 11:46:19 2020 +0100
@@ -2263,11 +2263,13 @@
 
 #ifdef PRIVSEP
 	if (ctx.options & DHCPCD_PRIVSEP) {
-
 		/*
-		 * PSF_CAP_ENTER is not set because the following functions
-		 * won't work in it:
-		 * getifaddrs(3), gethostname(3), uname(3).
+		 * PSF_CAP_ENTER is not set because getifaddrs(3) won't
+		 * work in it. This is a huge challenge because it's the
+		 * only portable interface to work stuff out and it's
+		 * non trivial to IPC for privsep.
+		 * gethostname(3) can be trivially done.
+		 * There could be more blockers, it's as far as I've got.
 		 */
 		if (ps_dropprivs(&ctx, PSF_PLEDGE) == -1) {
 			logerr("ps_dropprivs");