Sandbox with pledge(2) on OpenBSD

2021-01-06 21:09:51 -05:00 · 2021-01-06 21:09:51 -05:00 · 9ea029c580
parent 3b54425ec1
commit 9ea029c580
1 changed files with 5 additions and 0 deletions
--- a/chat.c
+++ b/chat.c
@ -125,6 +125,11 @@ static void signalHandler(int signal) {
 int main(int argc, char *argv[]) {
 	setlocale(LC_CTYPE, "");

+#ifdef __OpenBSD__
+	int error = pledge("stdio rpath wpath cpath inet dns tty proc exec", NULL);
+	if (error) err(EX_OSERR, "pledge");
+#endif
+
 	bool insecure = false;
 	const char *bind = NULL;
 	const char *host = NULL;