Marc Espie wrote:
> On Wed, Dec 02, 2015 at 04:40:33AM -0500, Ted Unangst wrote:
> > henning points out that if you are seven levels deep when doas asks for a
> > password, it can be hard to tell who is asking for what password.
> > 
> > modify the prompt to include the program name and user@host.
> > -   if (pledge("stdio rpath getpw proc exec id", NULL) == -1)
> > +   if (pledge("stdio rpath getpw tty proc exec id", NULL) == -1)
> >             err(1, "pledge");
> I'm slightly surprised about this. Seems weird that the simpler function
> doesn't twiddle the tty knob as well.

The simpler function execs login_passwd for all tty twiddling.

Reply via email to