7cd1e10 lua script: disable sandboxing — HardenedBSD-pkg

rad:z3QDZAW2FAfuLvihrhiyDC9fAD8G9

HardenedBSD Package Manager

lua script: disable sandboxing

Baptiste Daroussin committed 5 years ago

commit 7cd1e103769776a564b264cac3ddc4139ae9bdb9
parent c1f98e8

1 file changed +1 -9

modified libpkg/lua_scripts.c

@@ -30,10 +30,6 @@

 #include <sys/procctl.h>
 #endif
 #ifdef HAVE_CAPSICUM
 #include <sys/capsicum.h>
 #endif
 #include <sys/types.h>
 #include <sys/wait.h>

@@ -116,11 +112,7 @@ pkg_lua_script_run(struct pkg * const pkg, pkg_lua_script type, bool upgrade)

 			luaL_newlib(L, pkg_lib);
 			lua_setglobal(L, "pkg");
 			lua_override_ios(L, true);
 #ifdef HAVE_CAPSICUM
 			if (cap_enter() < 0 && errno != ENOSYS) {
 				err(1, "cap_enter failed");
 			}
 #endif
 			/* parse and set arguments of the line is in the comments */
 			if (STARTS_WITH(lscript->script, "-- args: ")) {
 				char *walk, *begin, *line = NULL;