Drop filesystem access iff possible
Log files and state save/restore both require read/write access to the filesystem, both during start and exit. If neither features are used, catgirl may run with "stdio tty".weechat-hashes
parent
837c9efce4
commit
bc3bd95648
10
chat.c
10
chat.c
|
@ -341,10 +341,12 @@ int main(int argc, char *argv[]) {
|
|||
}
|
||||
|
||||
#ifdef __OpenBSD__
|
||||
if (self.restricted) {
|
||||
error = pledge("stdio rpath wpath cpath tty", NULL);
|
||||
if (error) err(EX_OSERR, "pledge");
|
||||
}
|
||||
char promises[64] = "stdio tty";
|
||||
struct Cat cat = { promises, sizeof(promises), strlen(promises) };
|
||||
if (save || logEnable) catf(&cat, " rpath wpath cpath");
|
||||
if (!self.restricted) catf(&cat, " proc exec");
|
||||
error = pledge(promises, NULL);
|
||||
if (error) err(EX_OSERR, "pledge");
|
||||
#endif
|
||||
|
||||
struct pollfd fds[] = {
|
||||
|
|
Loading…
Reference in New Issue