mirror of https://github.com/c-ares/c-ares.git
Use SOCK_DNS extension on socket on OpenBSD (#659)
This patch added the `SOCK_DNS` flag when running on OpenBSD. Allowing a reduced set of `pledge(2)` promises. Before this patch. The "stdio rpath inet" promises must be used in order to resolve any records. After the patch inet can be replaced with dns which only allows communication on destination port 53, instead of on all ports. Side note: I checked the OpenBSD kernel source code. Even though the socket document says the DNS port (typically 53)., The OpenBSD 7.4 kernel only allows 53. Fix By: Martin Chang (@marty1885)pull/666/head
parent
567f581178
commit
e1c59941d9
1 changed files with 5 additions and 0 deletions
Loading…
Reference in new issue