commit e287969ac2298ee81f9f97ec6f091c110e4830f6
from: Stefan Sperling <stsp@stsp.name>
via: Thomas Adam <thomas@xteddy.org>
date: Fri Jan 24 22:02:34 2025 UTC

drop read access to /var/www from gotwebd's parent process

ok jamsek

commit - 006fe0beda9a4ed7cc63840ee601bf51d14547b9
commit + e287969ac2298ee81f9f97ec6f091c110e4830f6
blob - 2cd22d916b72cc071d7b497b36d34cb0e7e8aebb
blob + efdbbac6ff208df4f4225dd5af0b810f425b3acc
--- gotwebd/gotwebd.c
+++ gotwebd/gotwebd.c
@@ -412,9 +412,6 @@ main(int argc, char **argv)
 		err(1, "gmon.out");
 #endif
 
-	if (unveil(env->httpd_chroot, "r") == -1)
-		err(1, "unveil");
-
 	if (unveil(GOTWEBD_CONF, "r") == -1)
 		err(1, "unveil");