Symbol: unveil
bin/date/date.c
149
unveil("/var/log/wtmp", "w");
bin/ps/ps.c
299
if (unveil(_PATH_DEVDB, "r") == -1 && errno != ENOENT)
bin/ps/ps.c
301
if (unveil(_PATH_DEV, "r") == -1 && errno != ENOENT)
bin/ps/ps.c
304
if (unveil(swapf, "r") == -1)
bin/ps/ps.c
307
if (unveil(nlistf, "r") == -1)
bin/ps/ps.c
310
if (unveil(memf, "r") == -1)
bin/stty/stty.c
85
if (unveil("/", "") == -1)
bin/stty/stty.c
87
if (unveil(NULL, NULL) == -1)
games/tetris/tetris.c
236
if (unveil(scorepath, "rwc") == -1)
include/unistd.h
535
int unveil(const char *, const char *);
lib/libc/hidden/unistd.h
170
PROTO_NORMAL(unveil);
libexec/comsat/comsat.c
100
if (unveil(_PATH_DEV, "rw") == -1)
libexec/comsat/comsat.c
94
if (unveil(_PATH_MAILDIR, "r") == -1)
libexec/comsat/comsat.c
96
if (unveil(_PATH_UTMP, "r") == -1)
libexec/comsat/comsat.c
98
if (unveil("/tmp", "w") == -1)
libexec/fingerd/fingerd.c
111
if (unveil(prog, "x") == -1)
libexec/getty/main.c
175
if (unveil(_PATH_GETTYTAB, "r") == -1 ||
libexec/getty/main.c
176
unveil(_PATH_GETTYTAB ".db", "r") == -1) {
libexec/getty/main.c
180
if (unveil("/dev", "rw") == -1) {
libexec/getty/main.c
184
if (unveil(_PATH_GETTY, "x") == -1) {
libexec/getty/main.c
196
if (unveil(LO, "x") == -1) {
libexec/getty/main.c
200
if (unveil(NULL, NULL) == -1) {
libexec/lockspool/lockspool.c
56
if (unveil(_PATH_MAILDIR, "rwc") == -1)
libexec/rpc.rusersd/rusersd.c
109
if (unveil("/dev", "r") == -1) {
libexec/rpc.rusersd/rusersd.c
113
if (unveil(NULL, NULL) == -1) {
libexec/snmpd/snmpd_metrics/mib.c
3348
if (unveil(dirname(agentxsocketdir), "r") == -1)
libexec/snmpd/snmpd_metrics/mib.c
3353
if (unveil(NULL, NULL) == -1)
libexec/spamd/grey.c
1080
if (unveil(PATH_SPAMD_DB, "rw") == -1) {
libexec/spamd/grey.c
1084
if (unveil(alloweddomains_file, "r") == -1) {
libexec/spamd/grey.c
1088
if (unveil(PATH_PFCTL, "x") == -1) {
libexec/spamlogd/spamlogd.c
465
if (unveil(PATH_SPAMD_DB, "rw") == -1)
regress/sbin/ifconfig/ifaddr.c
287
if (unveil("/", "") == -1)
regress/sbin/ifconfig/ifaddr.c
289
if (unveil(NULL, NULL) == -1)
regress/sbin/ifconfig/ifaddr.c
326
if (unveil(_PATH_RESCONF, "r") == -1)
regress/sbin/ifconfig/ifaddr.c
328
if (unveil(_PATH_HOSTS, "r") == -1)
regress/sbin/ifconfig/ifaddr.c
330
if (unveil(_PATH_SERVICES, "r") == -1)
regress/sbin/ifconfig/ifaddr.c
332
if (unveil(NULL, NULL) == -1)
regress/sys/kern/pledge/open/open.c
50
if (unveil(argv[i], argv[i+1]) == -1)
regress/sys/kern/unveil-unmount/unveil-chdir.c
43
if (unveil(dir, "") == -1)
regress/sys/kern/unveil-unmount/unveil-chroot.c
43
if (unveil(dir, "") == -1)
regress/sys/kern/unveil-unmount/unveil-perm.c
40
if (unveil(dir, perm) == -1)
regress/sys/kern/unveil-unmount/unveil-unlink.c
42
if (unveil(dir, "r") == -1)
regress/sys/kern/unveil-unmount/unveil-unlink.c
44
if (unveil(NULL, NULL) == -1)
regress/sys/kern/unveil/access.c
30
UV_SHOULD_SUCCEED((unveil("/", "rwxc") == -1), "unveil");
regress/sys/kern/unveil/access.c
40
UV_SHOULD_SUCCEED((unveil(filename, perm) == -1), "unveil");
regress/sys/kern/unveil/socket.c
57
if (unveil(uv_dir1, "wc") == -1) /* both bind and connect work */
regress/sys/kern/unveil/socket.c
59
if (unveil(uv_dir2, "c") == -1) /* bind works, connect fails */
regress/sys/kern/unveil/socket.c
61
if (unveil(uv_dir3, "") == -1) /* no bind, dont test anything else */
regress/sys/kern/unveil/syscalls.c
109
if (unveil("/tmp/alpha", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
111
if (unveil("/tmp/bravo", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
113
if (unveil("/tmp/charlie", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
115
if (unveil("/tmp/delta", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
117
if (unveil("/tmp/echo", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
119
if (unveil("/tmp/foxtrot", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
121
if (unveil("/tmp/golf", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
123
if (unveil("/tmp/hotel", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
125
if (unveil("/tmp/india", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
127
if (unveil("/tmp/juliet", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
129
if (unveil("/tmp/kilo", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
131
if (unveil("/tmp/lima", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
133
if (unveil("/tmp/money", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
135
if (unveil("/tmp/november", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
137
if (unveil("/tmp/oscar", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
139
if (unveil("/tmp/papa", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
141
if (unveil("/tmp/quebec", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
143
if (unveil("/tmp/romeo", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
145
if (unveil("/tmp/sierra", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
147
if (unveil("/tmp/tango", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
149
if (unveil("/tmp/uniform", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
151
if (unveil("/tmp/victor", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
153
if (unveil("/tmp/whiskey", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
155
if (unveil("/tmp/xray", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
157
if (unveil("/tmp/yankee", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
159
if (unveil("/tmp/zulu", uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
188
if (unveil(uv_file1, "x") == -1)
regress/sys/kern/unveil/syscalls.c
190
if (unveil(uv_file1, "rx") == -1)
regress/sys/kern/unveil/syscalls.c
244
if (unveil(uv_file1, "r") == -1)
regress/sys/kern/unveil/syscalls.c
246
if (unveil("/", "") == -1)
regress/sys/kern/unveil/syscalls.c
259
if (unveil(uv_file1, "rw") == -1)
regress/sys/kern/unveil/syscalls.c
261
if (unveil("/", "") == -1)
regress/sys/kern/unveil/syscalls.c
275
if (unveil(uv_file1, "x") == -1)
regress/sys/kern/unveil/syscalls.c
277
if (unveil("/", "") == -1)
regress/sys/kern/unveil/syscalls.c
300
if (unveil(uv_dir1, "") == -1)
regress/sys/kern/unveil/syscalls.c
33
if (unveil(uv_dir1, uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
349
if (unveil(filename3, "rw") == -1)
regress/sys/kern/unveil/syscalls.c
35
if (unveil(uv_file1, uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
386
if (unveil(filename, "rw") == -1)
regress/sys/kern/unveil/syscalls.c
42
if (unveil(uv_dir1, uv_flags) == -1)
regress/sys/kern/unveil/syscalls.c
568
if (unveil("/usr/share/man/nonexistent", "rw") == -1)
regress/sys/kern/unveil/syscalls.c
643
if (unveil(filename, "rw") == -1)
regress/sys/kern/unveil/syscalls.c
665
if (unveil(uv_file1, "r") == -1)
regress/sys/kern/unveil/syscalls.c
698
if (unveil("/usr/bin/true", "x") == -1)
regress/sys/kern/unveil/syscalls.c
701
if (unveil("/usr/lib", "r") == -1)
regress/sys/kern/unveil/syscalls.c
703
if (unveil("/usr/libexec/ld.so", "r") == -1)
regress/sys/kern/unveil/syscalls.c
718
if (unveil("/usr/bin/true", "rw") == -1)
regress/sys/kern/unveil/syscalls.c
721
if (unveil("/usr/lib", "r") == -1)
regress/sys/kern/unveil/syscalls.c
723
if (unveil("/usr/libexec/ld.so", "r") == -1)
regress/sys/kern/unveil/syscalls.c
737
if (unveil("/bin/sh", "x") == -1)
regress/sys/kern/unveil/syscalls.c
739
if (unveil("/", "r") == -1)
regress/sys/kern/unveil/syscalls.c
751
if (unveil(".", "rwxc") == -1)
regress/sys/kern/unveil/syscalls.c
756
if (unveil(".", "r") == -1)
regress/sys/kern/unveil/syscalls.c
803
if (unveil("/", "r") == -1)
regress/sys/kern/unveil/syscalls.c
805
if (unveil("/dev/null", "rw") == -1)
regress/sys/kern/unveil/syscalls.c
821
if (unveil("/usr/share/man", "rx") == -1)
regress/sys/kern/unveil/syscalls.c
859
unveil(NULL, NULL);
regress/sys/kern/unveil/syscalls.c
864
UV_SHOULD_EPERM((unveil("/", "rwx") == -1), "unveil");
regress/sys/kern/unveil/syscalls.c
885
UV_SHOULD_SUCCEED((unveil("/", "r") == -1), "unveil");
regress/sys/kern/unveil/syscalls.c
886
UV_SHOULD_SUCCEED((unveil("/usr/bin/id", "rx") == -1),
regress/sys/kern/unveil/syscalls.c
888
UV_SHOULD_SUCCEED((unveil(NULL, NULL) == -1), "unveil");
regress/sys/kern/unveil/syscalls.c
902
UV_SHOULD_SUCCEED((unveil("/", "r") == -1), "unveil");
regress/sys/kern/unveil/syscalls.c
903
UV_SHOULD_SUCCEED((unveil("/usr/bin/id", "rx") == -1),
regress/sys/kern/unveil/syscalls.c
905
UV_SHOULD_SUCCEED((unveil("/usr/bin", "") == -1), "unveil");
regress/sys/kern/unveil/syscalls.c
906
UV_SHOULD_SUCCEED((unveil(NULL, NULL) == -1), "unveil");
regress/sys/kern/unveil/unveil.h
56
int unveil = 0, nonunveil = 0;
regress/sys/kern/unveil/unveil.h
76
unveil = WEXITSTATUS(status);
regress/sys/kern/unveil/unveil.h
82
if (!fail_ok && (unveil || nonunveil)) {
regress/sys/kern/unveil/unveil.h
83
printf("[FAIL] unveil = %d, nonunveil = %d\n", unveil,
regress/sys/kern/unveil/unveil.h
87
if (unveil == nonunveil)
regress/sys/kern/unveil/unveil.h
89
printf("[FAIL] unveil = %d, nonunveil = %d\n", unveil, nonunveil);
regress/usr.bin/lastcomm/unveil.c
24
if (unveil("/tmp", "r") == -1)
regress/usr.bin/lastcomm/unveil.c
26
if (unveil(NULL, NULL) == -1)
sbin/dhcp6leased/dhcp6leased.c
307
if (unveil(conffile, "r") == -1)
sbin/dhcp6leased/dhcp6leased.c
310
if (unveil(_PATH_LEASE, "rwc") == -1) {
sbin/dhcp6leased/dhcp6leased.c
315
if (unveil(NULL, NULL) == -1)
sbin/dhcp6leased/engine.c
192
if (unveil("/", "") == -1)
sbin/dhcp6leased/engine.c
194
if (unveil(NULL, NULL) == -1)
sbin/dhcp6leased/frontend.c
136
if (unveil("/", "") == -1)
sbin/dhcp6leased/frontend.c
138
if (unveil(NULL, NULL) == -1)
sbin/dhcpleased/dhcpleased.c
320
if (unveil(conffile, "r") == -1)
sbin/dhcpleased/dhcpleased.c
322
if (unveil("/dev/bpf", "rw") == -1)
sbin/dhcpleased/dhcpleased.c
325
if (unveil(_PATH_LEASE, "rwc") == -1) {
sbin/dhcpleased/dhcpleased.c
330
if (unveil(NULL, NULL) == -1)
sbin/dhcpleased/engine.c
203
if (unveil("/", "") == -1)
sbin/dhcpleased/engine.c
205
if (unveil(NULL, NULL) == -1)
sbin/dhcpleased/frontend.c
149
if (unveil("/", "") == -1)
sbin/dhcpleased/frontend.c
151
if (unveil(NULL, NULL) == -1)
sbin/fsck/fsck.c
112
if (unveil("/dev", "rw") == -1)
sbin/fsck/fsck.c
114
if (unveil(_PATH_FSTAB, "r") == -1)
sbin/fsck/fsck.c
116
if (unveil("/sbin", "x") == -1)
sbin/fsck_ffs/setup.c
107
if (unveil("/dev", "rw") == -1)
sbin/fsck_msdos/check.c
57
if (unveil("/dev", "rw") == -1)
sbin/ifconfig/ifconfig.c
797
if (unveil("/", "") == -1)
sbin/ifconfig/ifconfig.c
799
if (unveil(NULL, NULL) == -1)
sbin/ifconfig/ifconfig.c
856
if (unveil(_PATH_RESCONF, "r") == -1)
sbin/ifconfig/ifconfig.c
858
if (unveil(_PATH_HOSTS, "r") == -1)
sbin/ifconfig/ifconfig.c
860
if (unveil(_PATH_SERVICES, "r") == -1)
sbin/ifconfig/ifconfig.c
862
if (unveil(NULL, NULL) == -1)
sbin/mountd/mountd.c
376
if (unveil("/", "r") == -1) {
sbin/mountd/mountd.c
380
if (unveil(_PATH_RMOUNTLIST, "rwc") == -1) {
sbin/mountd/mountd.c
384
if (unveil(NULL, NULL) == -1) {
sbin/nfsd/nfsd.c
166
if (unveil("/", "") == -1) {
sbin/nfsd/nfsd.c
170
if (unveil(NULL, NULL) == -1) {
sbin/nologin/nologin.c
48
if (unveil(_PATH_NOLOGIN_TXT, "r") == -1)
sbin/pflogd/privsep.c
136
if (unveil(_PATH_RESCONF, "r") == -1)
sbin/pflogd/privsep.c
138
if (unveil(_PATH_HOSTS, "r") == -1)
sbin/pflogd/privsep.c
140
if (unveil(_PATH_SERVICES, "r") == -1)
sbin/pflogd/privsep.c
142
if (unveil("/dev/bpf", "r") == -1)
sbin/pflogd/privsep.c
144
if (unveil(filename, "rwc") == -1)
sbin/pflogd/privsep.c
146
if (unveil(NULL, NULL) == -1)
sbin/ping/ping.c
268
if (unveil("/", "r") == -1)
sbin/ping/ping.c
270
if (unveil(NULL, NULL) == -1)
sbin/resolvd/resolvd.c
224
if (unveil(_PATH_RESCONF, "rwc") == -1)
sbin/resolvd/resolvd.c
226
if (unveil(_PATH_RESCONF_NEW, "rwc") == -1)
sbin/resolvd/resolvd.c
229
if (unveil(_PATH_UNWIND_SOCKET, "w") == -1)
sbin/savecore/savecore.c
173
if (unveil(dirn, "rwc") == -1) {
sbin/savecore/savecore.c
177
if (unveil(kernel ? kernel : _PATH_UNIX, "r") == -1) {
sbin/savecore/savecore.c
181
if (unveil(rawname(ddname), "r") == -1) {
sbin/shutdown/shutdown.c
167
if (unveil(_PATH_CONSOLE, "rw") == -1)
sbin/shutdown/shutdown.c
169
if (unveil(_PATH_RC, "r") == -1)
sbin/shutdown/shutdown.c
171
if (unveil(_PATH_WALL, "x") == -1)
sbin/shutdown/shutdown.c
173
if (unveil(_PATH_FASTBOOT, "wc") == -1)
sbin/shutdown/shutdown.c
175
if (unveil(_PATH_NOLOGIN, "wc") == -1)
sbin/shutdown/shutdown.c
178
if (unveil(_PATH_HALT, "x") == -1)
sbin/shutdown/shutdown.c
181
if (unveil(_PATH_REBOOT, "x") == -1)
sbin/shutdown/shutdown.c
184
if (unveil(_PATH_BSHELL, "x") == -1)
sbin/slaacd/engine.c
369
if (unveil("/", "") == -1)
sbin/slaacd/engine.c
371
if (unveil(NULL, NULL) == -1)
sbin/slaacd/frontend.c
150
if (unveil("/", "") == -1)
sbin/slaacd/frontend.c
152
if (unveil(NULL, NULL) == -1)
sbin/sysctl/sysctl.c
270
if (unveil(_PATH_DEVDB, "r") == -1 && errno != ENOENT)
sbin/sysctl/sysctl.c
272
if (unveil("/dev", "r") == -1 && errno != ENOENT)
sbin/sysctl/sysctl.c
275
if (unveil(conffile, "r") == -1 && errno != ENOENT)
sbin/sysctl/sysctl.c
277
if (unveil(NULL, NULL) == -1)
sbin/unwind/resolver.c
398
if (unveil(TLS_DEFAULT_CA_CERT_FILE, "r") == -1)
sys/kern/kern_unveil.c
114
unveil_add_name_unlocked(struct unveil *uv, char *name, u_char flags)
sys/kern/kern_unveil.c
130
unveil_add_name(struct unveil *uv, char *name, u_char flags)
sys/kern/kern_unveil.c
141
unveil_namelookup(struct unveil *uv, char *name)
sys/kern/kern_unveil.c
171
struct unveil *uv = ps->ps_uvpaths + i;
sys/kern/kern_unveil.c
190
sizeof(struct unveil));
sys/kern/kern_unveil.c
205
sizeof(struct unveil), M_PROC, M_WAITOK|M_ZERO);
sys/kern/kern_unveil.c
210
struct unveil *from = parent->ps_uvpaths + i;
sys/kern/kern_unveil.c
211
struct unveil *to = child->ps_uvpaths + i;
sys/kern/kern_unveil.c
310
struct unveil *
sys/kern/kern_unveil.c
313
struct unveil *uv = pr->ps_uvpaths;
sys/kern/kern_unveil.c
375
struct unveil *
sys/kern/kern_unveil.c
379
struct unveil *uv = NULL;
sys/kern/kern_unveil.c
412
struct unveil *uv;
sys/kern/kern_unveil.c
424
sizeof(struct unveil), M_PROC, M_WAITOK|M_ZERO);
sys/kern/kern_unveil.c
570
struct unveil *
sys/kern/kern_unveil.c
571
unveil_covered(struct unveil *uv, struct vnode *dvp, struct proc *p)
sys/kern/kern_unveil.c
598
struct unveil *uv = NULL;
sys/kern/kern_unveil.c
631
struct unveil *uv = NULL;
sys/kern/kern_unveil.c
667
struct unveil *uv = NULL, *nuv;
sys/kern/kern_unveil.c
827
struct unveil * uv;
sys/kern/kern_unveil.c
96
unveil_delete_names(struct unveil *uv)
sys/sys/namei.h
208
struct unveil *unveil_lookup(struct vnode *, struct process *, ssize_t *);
sys/sys/namei.h
42
struct unveil;
sys/sys/namei.h
77
struct unveil *ni_unveil_match; /* last matching unveil component */
sys/sys/proc.h
130
struct unveil;
sys/sys/proc.h
224
struct unveil *ps_uvpaths; /* unveil vnodes and names */
usr.bin/audioctl/audioctl.c
307
if (unveil(path, "w") == -1)
usr.bin/audioctl/audioctl.c
309
if (unveil(NULL, NULL) == -1)
usr.bin/awk/main.c
244
if (unveil("/", "r") == -1) {
usr.bin/awk/main.c
249
if (unveil("/dev/null", "rw") == -1) {
usr.bin/biff/biff.c
63
if (unveil(name, "rw") == -1)
usr.bin/calendar/calendar.c
129
if (unveil("/tmp", "rwc") == -1)
usr.bin/calendar/calendar.c
131
if (unveil("/dev/null", "rw") == -1)
usr.bin/calendar/calendar.c
133
if (unveil("/", "r") == -1)
usr.bin/calendar/calendar.c
135
if (unveil(_PATH_SENDMAIL, "x") == -1)
usr.bin/calendar/calendar.c
137
if (unveil(_PATH_CPP, "x") == -1)
usr.bin/chpass/chpass.c
138
if (unveil(_PATH_BSHELL, "x") == -1)
usr.bin/chpass/chpass.c
140
if (unveil(_PATH_SHELLS, "r") == -1)
usr.bin/chpass/chpass.c
142
if (unveil(tempname, "rc") == -1)
usr.bin/chpass/chpass.c
166
if (unveil(_PATH_SHELLS, "r") == -1)
usr.bin/chpass/chpass.c
185
if (unveil(_PATH_MASTERPASSWD_LOCK, "rwc") == -1)
usr.bin/chpass/chpass.c
187
if (unveil(_PATH_MASTERPASSWD, "r") == -1)
usr.bin/chpass/chpass.c
189
if (unveil(_PATH_PWD_MKDB, "x") == -1)
usr.bin/ctfconv/ctfconv.c
129
if (unveil(filename, "r") == -1)
usr.bin/ctfconv/ctfconv.c
133
if (unveil(outfile, "wc") == -1)
usr.bin/diff/diff.c
214
if (unveil("/tmp", "rwc") == -1)
usr.bin/diff/diff.c
216
if (unveil("/", "r") == -1)
usr.bin/dig/host.c
832
if (unveil(_PATH_RESCONF, "r") == -1) {
usr.bin/dig/nslookup.c
909
if (unveil(_PATH_RESCONF, "r") == -1) {
usr.bin/doas/doas.c
274
if (unveil(cmd, "x") != -1)
usr.bin/doas/doas.c
295
if (unveil(buf, "x") != -1)
usr.bin/doas/doas.c
438
if (unveil(_PATH_LOGIN_CONF, "r") == -1)
usr.bin/doas/doas.c
440
if (unveil(_PATH_LOGIN_CONF ".db", "r") == -1)
usr.bin/doas/doas.c
442
if (unveil(_PATH_LOGIN_CONF_D, "r") == -1)
usr.bin/encrypt/encrypt.c
100
if (unveil(_PATH_LOGIN_CONF ".db", "r") == -1)
usr.bin/encrypt/encrypt.c
102
if (unveil(_PATH_LOGIN_CONF_D, "r") == -1)
usr.bin/encrypt/encrypt.c
98
if (unveil(_PATH_LOGIN_CONF, "r") == -1)
usr.bin/from/from.c
82
if (unveil(file, "r") == -1)
usr.bin/getconf/getconf.c
515
if (unveil(argv[1], "r") == -1)
usr.bin/getent/getent.c
102
if (curdb->unveil != NULL) {
usr.bin/getent/getent.c
103
if (unveil(curdb->unveil, "r") == -1)
usr.bin/getent/getent.c
104
err(1, "unveil %s", curdb->unveil);
usr.bin/getent/getent.c
79
const char *unveil;
usr.bin/htpasswd/htpasswd.c
76
if (unveil(argv[0], "rwc") == -1)
usr.bin/htpasswd/htpasswd.c
78
if (unveil("/tmp", "rwc") == -1)
usr.bin/kdump/kdump.c
239
if (unveil(tracefile, "r") == -1)
usr.bin/kdump/kdump.c
241
if (unveil(_PATH_PROTOCOLS, "r") == -1)
usr.bin/last/last.c
155
if (unveil(file, "r") == -1)
usr.bin/mandoc/main.c
359
if (unveil("/tmp", "rwc") == -1) {
usr.bin/mandoc/main.c
364
if (unveil(".", "rwc") == -1) {
usr.bin/mandoc/main.c
368
if (unveil(conf.output.outfilename, "rwc") == -1) {
usr.bin/mandoc/main.c
374
if (unveil(".", "rwc") == -1) {
usr.bin/mandoc/main.c
378
if (unveil(conf.output.tagfilename, "rwc") == -1) {
usr.bin/mandoc/main.c
383
if (unveil("/", "rx") == -1) {
usr.bin/mesg/mesg.c
66
if (unveil(tty, "rw") == -1)
usr.bin/mixerctl/mixerctl.c
287
if (unveil(file, "w") == -1)
usr.bin/mixerctl/mixerctl.c
290
if (unveil(NULL, NULL) == -1)
usr.bin/nc/netcat.c
368
if (Cflag && unveil(Cflag, "r") == -1)
usr.bin/nc/netcat.c
370
if (unveil(Rflag, "r") == -1)
usr.bin/nc/netcat.c
372
if (Kflag && unveil(Kflag, "r") == -1)
usr.bin/nc/netcat.c
374
if (oflag && unveil(oflag, "r") == -1)
usr.bin/nc/netcat.c
384
if (unveil("/tmp", "rwc") == -1)
usr.bin/nc/netcat.c
386
if (unveil(host, "rwc") == -1)
usr.bin/nc/netcat.c
390
if (unveil(sflag, "rwc") == -1)
usr.bin/nc/netcat.c
393
if (unveil("/tmp", "rwc") == -1)
usr.bin/nc/netcat.c
399
if (unveil("/", "") == -1)
usr.bin/passwd/local_passwd.c
75
if (unveil(_PATH_MASTERPASSWD_LOCK, "rwc") == -1)
usr.bin/passwd/local_passwd.c
77
if (unveil(_PATH_MASTERPASSWD, "r") == -1)
usr.bin/passwd/local_passwd.c
79
if (unveil(_PATH_LOGIN_CONF, "r") == -1)
usr.bin/passwd/local_passwd.c
81
if (unveil(_PATH_LOGIN_CONF ".db", "r") == -1)
usr.bin/passwd/local_passwd.c
83
if (unveil(_PATH_LOGIN_CONF_D, "r") == -1)
usr.bin/passwd/local_passwd.c
85
if (unveil(_PATH_BSHELL, "x") == -1)
usr.bin/passwd/local_passwd.c
87
if (unveil(_PATH_SHELLS, "r") == -1)
usr.bin/passwd/local_passwd.c
89
if (unveil(_PATH_PWD_MKDB, "x") == -1)
usr.bin/patch/patch.c
210
if (unveil(tmpdir, "rwc") == -1) {
usr.bin/patch/patch.c
215
if (unveil(outname, "rwc") == -1) {
usr.bin/patch/patch.c
222
if (unveil(filearg[0], "rwc") == -1) {
usr.bin/patch/patch.c
230
if (unveil(origdir, "rwc") == -1) {
usr.bin/patch/patch.c
235
if (unveil(".", "rwc") == -1) {
usr.bin/patch/patch.c
241
if (unveil(filearg[1], "r") == -1) {
usr.bin/patch/patch.c
246
if (unveil(_PATH_TTY, "r") == -1) {
usr.bin/patch/patch.c
251
if (unveil(rejname, "rwc") == -1) {
usr.bin/pkgconf/libpkgconf/bsdstubs.c
194
return unveil(path, permissions);
usr.bin/rpcinfo/rpcinfo.c
101
if (unveil(NULL, NULL) == -1)
usr.bin/rpcinfo/rpcinfo.c
99
if (unveil("/etc/rpc", "r") == -1)
usr.bin/rsync/receiver.c
200
dfd = unveil(sess->opts->basedir_abs[i], "r");
usr.bin/rsync/receiver.c
205
if (unveil(root, "rwc") == -1)
usr.bin/sdiff/sdiff.c
265
if (unveil(filename1, "r") == -1)
usr.bin/sdiff/sdiff.c
267
if (unveil(filename2, "r") == -1)
usr.bin/sdiff/sdiff.c
269
if (unveil(tmpdir, "rwc") == -1)
usr.bin/sdiff/sdiff.c
271
if (unveil("/usr/bin/diff", "x") == -1)
usr.bin/sdiff/sdiff.c
273
if (unveil(_PATH_BSHELL, "x") == -1)
usr.bin/sndiod/sndiod.c
434
if (unveil(path, "rw") == -1)
usr.bin/ssh/ssh-agent.c
2524
if (unveil("/", "r") == -1)
usr.bin/ssh/ssh-agent.c
2528
if (unveil(ccp, "x") == -1)
usr.bin/ssh/ssh-agent.c
2532
if (unveil(ccp, "x") == -1)
usr.bin/ssh/ssh-agent.c
2536
if (unveil(ccp, "x") == -1)
usr.bin/ssh/ssh-agent.c
2538
if (unveil("/dev/null", "rw") == -1)
usr.bin/su/su.c
163
if (unveil(_PATH_LOGIN_CONF, "r") == -1)
usr.bin/su/su.c
165
if (unveil(_PATH_LOGIN_CONF ".db", "r") == -1)
usr.bin/su/su.c
167
if (unveil(_PATH_LOGIN_CONF_D, "r") == -1)
usr.bin/su/su.c
169
if (unveil(_PATH_AUTHPROGDIR, "x") == -1)
usr.bin/su/su.c
171
if (unveil(_PATH_SHELLS, "r") == -1)
usr.bin/su/su.c
173
if (unveil(_PATH_DEVDB, "r") == -1)
usr.bin/su/su.c
175
if (unveil(_PATH_NOLOGIN, "r") == -1)
usr.bin/su/su.c
255
if (unveil(shell, "x") == -1)
usr.bin/su/su.c
257
if (unveil(pwd->pw_dir, "r") == -1)
usr.bin/su/su.c
287
if (unveil("/", "r") == -1)
usr.bin/systat/main.c
580
if (unveil("/", "r") == -1)
usr.bin/systat/main.c
582
if (unveil(NULL, NULL) == -1)
usr.bin/tcpbench/tcpbench.c
1274
if (unveil(host, "rwc") == -1)
usr.bin/tty/tty.c
59
if (unveil(_PATH_DEVDB, "r") == -1)
usr.bin/usbhidaction/usbhidaction.c
165
if (unveil(conf, "r") == -1)
usr.bin/usbhidaction/usbhidaction.c
167
if (unveil(_PATH_BSHELL, "x") == -1)
usr.bin/usbhidaction/usbhidaction.c
169
if (unveil(NULL, NULL) == -1)
usr.bin/usbhidctl/usbhid.c
939
if (unveil("/", "") == -1)
usr.bin/usbhidctl/usbhid.c
941
if (unveil(NULL, NULL) == -1)
usr.bin/users/users.c
56
if (unveil(_PATH_UTMP, "r") == -1)
usr.bin/vmstat/vmstat.c
212
if (unveil("/", "") == -1)
usr.bin/vmstat/vmstat.c
214
if (unveil(NULL, NULL) == -1)
usr.bin/wall/wall.c
117
if (unveil(_PATH_UTMP, "r") == -1)
usr.bin/wall/wall.c
119
if (unveil(_PATH_DEV, "w") == -1)
usr.bin/wall/wall.c
121
if (unveil(_PATH_DEVDB, "r") == -1)
usr.bin/watch/watch.c
224
if (unveil(xflag ? cmdv[0] : _PATH_BSHELL, "x") == -1)
usr.bin/who/who.c
122
if (unveil(_PATH_UTMP, "r") == -1)
usr.bin/who/who.c
125
if (unveil(_PATH_DEV, "r") == -1)
usr.bin/who/who.c
129
if (unveil(*argv, "r") == -1)
usr.sbin/acme-client/chngproc.c
41
if (unveil(root, "wc") == -1) {
usr.sbin/acme-client/fileproc.c
102
if (unveil(certdir, "rwc") == -1) {
usr.sbin/acme-client/netproc.c
740
if (unveil(tls_default_ca_cert_file(), "r") == -1) {
usr.sbin/acpidump/acpidump.c
608
if (unveil(aml_dumpfile, "wc") == -1)
usr.sbin/acpidump/acpidump.c
611
if (unveil("/", "wc") == -1)
usr.sbin/acpidump/acpidump.c
614
if (unveil(".", "wc") == -1)
usr.sbin/acpidump/acpidump.c
618
if (unveil(_PATH_MEM, "r") == -1)
usr.sbin/acpidump/acpidump.c
620
if (unveil(_PATH_KMEM, "r") == -1)
usr.sbin/acpidump/acpidump.c
622
if (unveil(_PATH_KVMDB, "r") == -1)
usr.sbin/acpidump/acpidump.c
624
if (unveil(_PATH_KSYMS, "r") == -1)
usr.sbin/acpidump/acpidump.c
626
if (unveil(_PATH_UNIX, "r") == -1)
usr.sbin/apmd/apmd.c
533
if (unveil(_PATH_APM_ETC_DIR, "rx") == -1)
usr.sbin/apmd/apmd.c
535
if (unveil("/etc/random.seed", "w") == -1)
usr.sbin/apmd/apmd.c
537
if (unveil(NULL, NULL) == -1)
usr.sbin/bgplgd/slowcgi.c
249
if (unveil(prog, "x") == -1)
usr.sbin/bgplgd/slowcgi.c
268
if (unveil(cmd, "x") == -1)
usr.sbin/bpflogd/bpflogd.c
388
if (unveil(bd->bd_fname, "rwc") == -1)
usr.sbin/bpflogd/bpflogd.c
390
if (unveil(NULL, NULL) == -1)
usr.sbin/btrace/btrace.c
177
if (unveil(__PATH_DEVDT, "r") == -1)
usr.sbin/btrace/btrace.c
179
if (unveil(_PATH_KSYMS, "r") == -1)
usr.sbin/btrace/btrace.c
182
if (unveil(filename, "r") == -1)
usr.sbin/btrace/btrace.c
185
if (unveil(NULL, NULL) == -1)
usr.sbin/dev_mkdb/dev_mkdb.c
66
if (unveil(_PATH_DEV, "r") == -1)
usr.sbin/dev_mkdb/dev_mkdb.c
68
if (unveil(dbtmp, "rwc") == -1)
usr.sbin/dev_mkdb/dev_mkdb.c
70
if (unveil(dbname, "wc") == -1)
usr.sbin/dhcpd/pfutils.c
64
if (unveil("/", "") == -1)
usr.sbin/dhcpd/pfutils.c
66
if (unveil(NULL, NULL) == -1)
usr.sbin/ftp-proxy/ftp-proxy.c
781
if (unveil("/", "") == -1) {
usr.sbin/ftp-proxy/ftp-proxy.c
785
if (unveil(NULL, NULL) == -1) {
usr.sbin/hotplugd/hotplugd.c
80
if (unveil(device, "r") == -1)
usr.sbin/hotplugd/hotplugd.c
82
if (unveil(_PATH_ETC_HOTPLUG_ATTACH, "rx") == -1)
usr.sbin/hotplugd/hotplugd.c
84
if (unveil(_PATH_ETC_HOTPLUG_DETACH, "rx") == -1)
usr.sbin/ifstated/ifstated.c
164
if (unveil(configfile, "r") == -1)
usr.sbin/ifstated/ifstated.c
166
if (unveil(_PATH_BSHELL, "x") == -1)
usr.sbin/iostat/iostat.c
169
if (unveil("/", "") == -1)
usr.sbin/iostat/iostat.c
171
if (unveil(NULL, NULL) == -1)
usr.sbin/kvm_mkdb/kvm_mkdb.c
119
if (unveil(argv[0], "r") == -1)
usr.sbin/kvm_mkdb/kvm_mkdb.c
122
if (unveil(_PATH_UNIX, "r") == -1)
usr.sbin/kvm_mkdb/kvm_mkdb.c
124
if (unveil(_PATH_KSYMS, "r") == -1)
usr.sbin/kvm_mkdb/kvm_mkdb.c
127
if (unveil(dbdir, "rwc") == -1)
usr.sbin/ldapd/ldapd.c
238
if (unveil(_PATH_NOLOGIN, "r") == -1)
usr.sbin/ldapd/ldapd.c
240
if (unveil(_PATH_LOGIN_CONF, "r") == -1)
usr.sbin/ldapd/ldapd.c
242
if (unveil(_PATH_LOGIN_CONF ".db", "r") == -1)
usr.sbin/ldapd/ldapd.c
244
if (unveil(_PATH_LOGIN_CONF_D, "r") == -1)
usr.sbin/ldapd/ldapd.c
246
if (unveil(_PATH_AUTHPROGDIR, "x") == -1)
usr.sbin/ldapd/ldapd.c
248
if (unveil(datadir, "rwc") == -1)
usr.sbin/ldapd/ldapd.c
250
if (unveil(NULL, NULL) == -1)
usr.sbin/ldpd/ldpd.c
225
if (unveil("/", "r") == -1)
usr.sbin/ldpd/ldpd.c
227
if (unveil(NULL, NULL) == -1)
usr.sbin/makefs/cd9660.c
1977
if (unveil(diskStructure->generic_bootimage, "r") == -1)
usr.sbin/makefs/cd9660/cd9660_eltorito.c
122
if (unveil(new_image->filename, "r") == -1)
usr.sbin/makefs/makefs.c
200
if (unveil(argv[0], "rwc") == -1)
usr.sbin/makefs/makefs.c
202
if (unveil(argv[1], "rw") == -1)
usr.sbin/ntpd/ntpd.c
286
if (unveil("/usr/sbin/ntpd", "x") == -1)
usr.sbin/ocspcheck/ocspcheck.c
620
if (unveil(cafile, "r") == -1)
usr.sbin/ocspcheck/ocspcheck.c
624
if (unveil(cadir, "r") == -1)
usr.sbin/ocspcheck/ocspcheck.c
627
if (unveil(certfile, "r") == -1)
usr.sbin/ospf6d/ospf6d.c
281
if (unveil("/", "") == -1)
usr.sbin/ospf6d/ospf6d.c
283
if (unveil(NULL, NULL) == -1)
usr.sbin/ospfd/ospfd.c
286
if (unveil("/", "r") == -1)
usr.sbin/ospfd/ospfd.c
288
if (unveil(NULL, NULL) == -1)
usr.sbin/pcidump/pcidump.c
212
if (unveil("/dev", "r") == -1)
usr.sbin/pcidump/pcidump.c
214
if (unveil(NULL, NULL) == -1)
usr.sbin/pstat/pstat.c
231
if (unveil(_PATH_DEVDB, "r") == -1)
usr.sbin/radiusctl/radiusctl.c
116
if (unveil(RADIUSD_SOCK, "rw") == -1)
usr.sbin/radiusd/radiusd_file.c
149
if (unveil(paramsp->path, "r") == -1 ||
usr.sbin/radiusd/radiusd_file.c
150
unveil(pathdb, "r") == -1)
usr.sbin/radiusd/radiusd_file.c
156
if (unveil(NULL, NULL) == -1)
usr.sbin/radiusd/radiusd_ipcp.c
250
if (unveil(_PATH_RADIUSD_IPCP_DB, "rw") == -1)
usr.sbin/rarpd/rarpd.c
343
if (unveil(TFTP_DIR, "r") == -1)
usr.sbin/rarpd/rarpd.c
345
if (unveil("/etc/ethers", "r") == -1)
usr.sbin/relayd/relayd.c
227
if (unveil("/", "rx") == -1)
usr.sbin/relayd/relayd.c
230
if (unveil(env->sc_conf.agentx_path, "w") == -1)
usr.sbin/relayd/relayd.c
233
if (unveil(AGENTX_MASTER_PATH, "w") == -1)
usr.sbin/relayd/relayd.c
236
if (unveil(NULL, NULL) == -1)
usr.sbin/ripd/ripd.c
213
if (unveil("/", "") == -1)
usr.sbin/ripd/ripd.c
215
if (unveil(NULL, NULL) == -1)
usr.sbin/rpki-client/filemode.c
795
if (unveil(".", "r") == -1)
usr.sbin/rpki-client/main.c
1333
if (unveil(cachedir, "r") == -1)
usr.sbin/rpki-client/main.c
1336
if (unveil(outputdir, "rwc") == -1)
usr.sbin/rpki-client/main.c
1338
if (unveil(cachedir, "rwc") == -1)
usr.sbin/rpki-client/parser.c
1193
if (unveil(".", "r") == -1)
usr.sbin/rpki-client/rsync.c
285
} else if (unveil(cmd, "x") == -1)
usr.sbin/rpki-client/rsync.c
291
} else if (unveil(prog, "x") == -1)
usr.sbin/sensorsd/sensorsd.c
149
if (unveil(configfile, "r") == -1)
usr.sbin/sensorsd/sensorsd.c
151
if (unveil(configdb, "r") == -1)
usr.sbin/sensorsd/sensorsd.c
153
if (unveil("/", "x") == -1)
usr.sbin/smtpd/smtpc.c
248
if (unveil("/tmp", "rwc") == -1)
usr.sbin/snmpd/snmpe.c
111
if (unveil("/", "") == -1)
usr.sbin/syslogd/privsep.c
187
if (unveil(conf, "r") == -1)
usr.sbin/syslogd/privsep.c
189
if (unveil(_PATH_UTMP, "r") == -1)
usr.sbin/syslogd/privsep.c
191
if (unveil(_PATH_DEV, "rw") == -1)
usr.sbin/syslogd/privsep.c
193
if (unveil(_PATH_LOGPID, "c") == -1)
usr.sbin/syslogd/privsep.c
197
if (unveil(_PATH_BSHELL, "x") == -1)
usr.sbin/syslogd/privsep.c
201
if (unveil("/usr/sbin/syslogd", "x") == -1)
usr.sbin/syslogd/privsep.c
204
if (unveil(argv[0], "x") == -1)
usr.sbin/syslogd/privsep.c
576
if (unveil(lognam, "w") == -1)
usr.sbin/tcpdrop/tcpdrop.c
64
if (unveil(_PATH_HOSTS, "r") == -1)
usr.sbin/tcpdrop/tcpdrop.c
66
if (unveil(_PATH_RESCONF, "r") == -1)
usr.sbin/tcpdrop/tcpdrop.c
68
if (unveil(NULL, NULL) == -1)
usr.sbin/tcpdump/privsep.c
318
if (unveil("/etc/ethers", "r") == -1)
usr.sbin/tcpdump/privsep.c
320
if (unveil("/etc/rpc", "r") == -1)
usr.sbin/traceroute/traceroute.c
336
if (unveil("/", "r") == -1)
usr.sbin/traceroute/traceroute.c
338
if (unveil(NULL, NULL) == -1)
usr.sbin/unbound/smallapp/unbound-anchor.c
2455
if (unveil(root_anchor_temppath, "rwc") == -1)
usr.sbin/unbound/smallapp/unbound-anchor.c
2459
if (unveil(root_cert_file, "r") == -1)
usr.sbin/unbound/smallapp/unbound-anchor.c
2461
if (res_conf != NULL && unveil(res_conf, "r") == -1)
usr.sbin/unbound/smallapp/unbound-anchor.c
2463
if (root_hints != NULL && unveil(root_hints, "r") == -1)
usr.sbin/unbound/smallapp/unbound-anchor.c
2465
if (debugconf != NULL && unveil(debugconf, "r") == -1)
usr.sbin/usbdevs/usbdevs.c
265
if (unveil("/dev", "r") == -1)
usr.sbin/usbdevs/usbdevs.c
267
if (unveil(NULL, NULL) == -1)
usr.sbin/vipw/vipw.c
66
if (unveil(_PATH_MASTERPASSWD_LOCK, "rwc") == -1)
usr.sbin/vipw/vipw.c
68
if (unveil(_PATH_MASTERPASSWD, "r") == -1)
usr.sbin/vipw/vipw.c
70
if (unveil(_PATH_BSHELL, "x") == -1)
usr.sbin/vipw/vipw.c
72
if (unveil(_PATH_PWD_MKDB, "x") == -1)
usr.sbin/vmctl/main.c
1004
if (unveil(VMCTL_CU, "x") == -1)
usr.sbin/vmctl/main.c
193
if (unveil(SOCKET_NAME, "w") == -1)
usr.sbin/vmctl/vmctl.c
85
if (unveil(kernel, "r") == -1)
usr.sbin/vmd/vm.c
97
if (unveil(env->argv0, "x") == -1)
usr.sbin/vmd/vm.c
99
if (unveil(NULL, NULL) == -1)
usr.sbin/vmd/vmm.c
84
if (unveil(env->argv0, "x") == -1)
usr.sbin/vmd/vmm.c
86
if (unveil(NULL, NULL) == -1)