pf plugin: read permissions are enough for /dev/pf

diff --git a/src/pf.c b/src/pf.c
index 7c677bf62b920ad662e8cadfe3da8495fbf1b0fc..9d99e3a7263c8ee55a1caa262834cd046ee77590 100644 (file)
--- a/src/pf.c
+++ b/src/pf.c
@@ -48,7 +48,7 @@ pf_init(void)
 {
        struct pf_status        status;
 
-       if ((dev = open(PF_SOCKET, O_RDWR)) == -1) {
+       if ((dev = open(PF_SOCKET, O_RDONLY)) == -1) {
                return (-1);
        }
        if (ioctl(dev, DIOCGETSTATUS, &status) == -1) {
@@ -72,7 +72,7 @@ pf_read(void)
        char            *lnames[] = LCNT_NAMES;
        char            *names[] = { "searches", "inserts", "removals" };
 
-       if ((dev = open(PF_SOCKET, O_RDWR)) == -1) {
+       if ((dev = open(PF_SOCKET, O_RDONLY)) == -1) {
                return (-1);
        }
        if (ioctl(dev, DIOCGETSTATUS, &status) == -1) {