Theo de Raadt proposed changes to restrict access to the filesystem through the openat function.
Theo de Raadt has proposed the inclusion of a new mechanism in OpenBSD to reduce the attack surface, implemented through the enhanced capabilities of the openat system call. Patches with the implementation of additional flags for openat and open, which limit the ability to traverse to parent directories via "/.." and access by absolute paths, have been prepared for the kernel, libc, and some applications from the base system. The changes are still […]
