openbsd.fsck: unveil /nix/store too

2025-01-06 23:07:55 -08:00
parent 55d65381bb
commit 52f3e97ee4
1 changed files with 11 additions and 2 deletions
@@ -1,8 +1,17 @@
 diff --git a/sbin/fsck/fsck.c b/sbin/fsck/fsck.c
-index 19e730a484f..176d614d986 100644
+index 19e730a484f..cb548971abd 100644
 --- a/sbin/fsck/fsck.c
 +++ b/sbin/fsck/fsck.c
-@@ -308,18 +308,8 @@ checkfs(const char *vfstype, const char *spec, const char *mntpt, void *auxarg,
+@@ -115,6 +115,8 @@ main(int argc, char *argv[])
+ 		err(1, "unveil %s", _PATH_FSTAB);
+ 	if (unveil("/sbin", "x") == -1)
+ 		err(1, "unveil /sbin");
+	if (unveil("/nix/store", "rx") == -1)
+		err(1, "unveil /nix/store");
+ 	if (pledge("stdio rpath wpath disklabel proc exec", NULL) == -1)
+ 		err(1, "pledge");
+ 
+@@ -308,18 +310,8 @@ checkfs(const char *vfstype, const char *spec, const char *mntpt, void *auxarg,
 			_exit(0);
 
 		/* Go find an executable. */