From c93c56e4e558e1877cfcd85580a826a4002166eb Mon Sep 17 00:00:00 2001 From: Klemens Nanni Date: Fri, 22 Jan 2021 22:02:00 +0100 Subject: [PATCH] Drop network capability after ircConnect() catgirl has no reconnect feature and generally must not do anything but read/write from/to the connected socket which does not require "inet" or "dns" promises. --- chat.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/chat.c b/chat.c index 87daccd..bc035e3 100644 --- a/chat.c +++ b/chat.c @@ -307,6 +307,11 @@ int main(int argc, char *argv[]) { uiDraw(); int irc = ircConnect(bind, host, port); +#ifdef __OpenBSD__ + error = pledge("stdio rpath wpath cpath tty proc exec", NULL); + if (error) err(EX_OSERR, "pledge"); +#endif + if (pass) ircFormat("PASS :%s\r\n", pass); if (sasl) ircFormat("CAP REQ :sasl\r\n"); ircFormat("CAP LS\r\n");