deraadt ee1bf64f5b In the namei callback for __pledge_open() invert the logic of checking ...

pledge/namei modes and then checking for the path.  Now, first
identify the path with array bsearch then check the pledge/namei modes.
Since this is __pledge_open(), if the path is not known, terminate with
an EACCES abort.  If the path is known but the pledge/namei modes don't
suggest an unveil bypass, allow the code to fallthrough to the rpath/wpath
checks, and then back into namei for unveil validation.
ok dgl

2026-03-25 05:14:10 +00:00

..

clock_subr.c

…

dma_alloc.c

…

exec_conf.c

…

exec_elf.c

…

exec_script.c

…

exec_subr.c

…

genassym.sh

…

init_main.c

…

init_sysent.c

…

kern_acct.c

…

kern_bufq.c

…

kern_clock.c

…

kern_clockintr.c

…

kern_descrip.c

…

kern_event.c

…

kern_exec.c

…

kern_exit.c

…

kern_fork.c

…

kern_intrmap.c

…

kern_kthread.c

…

kern_ktrace.c

…

kern_lock.c

…

kern_malloc.c

…

kern_physio.c

…

kern_pledge.c

In the namei callback for __pledge_open() invert the logic of checking

2026-03-25 05:14:10 +00:00

kern_proc.c

…

kern_prot.c

…

kern_resource.c

…

kern_rwlock.c

…

kern_sched.c

…

kern_sensors.c

…

kern_sig.c

…

kern_smr.c

…

kern_softintr.c

…

kern_srp.c

…

kern_subr.c

…

kern_synch.c

…

kern_sysctl.c

Wrap the pledge-related sysctl code in SMALL_KERNEL, because it is big

2026-03-25 05:05:41 +00:00

kern_task.c

…

kern_tc.c

…

kern_time.c

…

kern_timeout.c

…

kern_unveil.c

…

kern_uuid.c

…

kern_watchdog.c

…

kern_xcall.c

…

kern_xxx.c

…

Makefile

…

makesyscalls.sh

…

sched_bsd.c

…

spec_vnops.c

…

subr_autoconf.c

…

subr_blist.c

…

subr_disk.c

…

subr_evcount.c

…

subr_extent.c

…

subr_hibernate.c

…

subr_kubsan.c

…

subr_log.c

…

subr_percpu.c

…

subr_poison.c

…

subr_pool.c

…

subr_prf.c

…

subr_prof.c

…

subr_suspend.c

…

subr_tree.c

…

subr_userconf.c

…

subr_witness.c

…

subr_xxx.c

…

sys_futex.c

…

sys_generic.c

…

sys_pipe.c

…

sys_process.c

…

sys_socket.c

…

syscalls.c

…

syscalls.master

…

sysv_ipc.c

…

sysv_msg.c

…

sysv_sem.c

…

sysv_shm.c

…

tty_conf.c

…

tty_endrun.c

…

tty_msts.c

…

tty_nmea.c

…

tty_pty.c

…

tty_subr.c

…

tty_tty.c

…

tty.c

…

uipc_domain.c

…

uipc_mbuf2.c

…

uipc_mbuf.c

…

uipc_proto.c

…

uipc_socket2.c

…

uipc_socket.c

…

uipc_syscalls.c

…

uipc_usrreq.c

…

vfs_bio.c

…

vfs_biomem.c

…

vfs_cache.c

…

vfs_default.c

…

vfs_getcwd.c

…

vfs_init.c

…

vfs_lockf.c

…

vfs_lookup.c

…

vfs_subr.c

…

vfs_sync.c

…

vfs_syscalls.c

…

vfs_vnops.c

…

vfs_vops.c

…