summary refs log tree commit diff
diff options
context:
space:
mode:
authorC. McEnroe2021-01-06 21:09:51 -0500
committerC. McEnroe2021-01-06 21:47:56 -0500
commit9ea029c5805f00861db3dfc09b6c9483fe77c5cf (patch)
treea7ed3bc0130ad4872f3a02a7f6eb67c42d4cd674
parent3b54425ec178a1ece9214cf2d862c105ad01247c (diff)
Sandbox with pledge(2) on OpenBSD
-rw-r--r--chat.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/chat.c b/chat.c
index 296c0c4..016d604 100644
--- a/chat.c
+++ b/chat.c
@@ -125,6 +125,11 @@ static void signalHandler(int signal) {
 int main(int argc, char *argv[]) {
 	setlocale(LC_CTYPE, "");
 
+#ifdef __OpenBSD__
+	int error = pledge("stdio rpath wpath cpath inet dns tty proc exec", NULL);
+	if (error) err(EX_OSERR, "pledge");
+#endif
+
 	bool insecure = false;
 	const char *bind = NULL;
 	const char *host = NULL;