When using an external program to provide the jabber password we need to 
allow proc and exec the same way like we do when using an external program 
for event handling. Tested with a gpg encrypted password file.

Ok?



Index: patches/patch-mcabber_main_c
===================================================================
RCS file: /cvs/ports/net/mcabber/patches/patch-mcabber_main_c,v
retrieving revision 1.2
diff -u -p -r1.2 patch-mcabber_main_c
--- patches/patch-mcabber_main_c        26 May 2017 10:34:53 -0000      1.2
+++ patches/patch-mcabber_main_c        1 Feb 2019 18:02:56 -0000
@@ -6,7 +6,7 @@ Index: mcabber/main.c
    if (ret == -2)
      exit(EXIT_FAILURE);
  
-+  if (settings_opt_get("events_command")) {
++  if (settings_opt_get("events_command") || 
settings_opt_get("password_eval")) {
 +    if (pledge("stdio rpath wpath cpath fattr inet dns tty proc exec", NULL) 
==
 +      -1) {
 +      fprintf(stderr, "Cannot pledge: %s\n", strerror(errno));

Reply via email to