Changeset 411aa63 in code

Timestamp:

Sep 21, 2016, 7:37:26 PM (9 years ago)

Author:

Tim Kuijsten <tim@…>

Branches:

master

Children:

6f076e7

Parents:

67f3e60

git-author:

Tim Kuijsten <tim@…> (09/21/16 17:32:01)

git-committer:

Tim Kuijsten <tim@…> (09/21/16 19:37:26)

Message:

pledge icbd and it's logger process

Files:

• icbd.c (modified) (1 diff)
• logger.c (modified) (1 diff)

icbd.c

@@ -504 +504 @@
         }
 
+        if (dodns) {
+                if (pledge("stdio inet rpath dns", NULL) == -1) {
+                        syslog(LOG_ERR, "pledge");
+                        exit(EX_NOPERM);
+                }
+        } else {
+                if (pledge("stdio inet rpath", NULL) == -1) {
+                        syslog(LOG_ERR, "pledge");
+                        exit(EX_NOPERM);
+                }
+        }
+
         (void)setproctitle("icbd");
 }

logger.c

@@ -119 +119 @@
         }
 
+        if (pledge("stdio cpath wpath", NULL) == -1) {
+                syslog(LOG_ERR, "%s: pledge", __func__);
+                exit(EX_NOPERM);
+        }
+
         event_init();