Drop network capability after ircConnect()

catgirl has no reconnect feature and generally must not do
anything but read/write from/to the connected socket which
does not require "inet" or "dns" promises.

1 files changed, 5 insertions, 0 deletions

diff --git a/chat.c b/chat.c
index 87daccd..bc035e3 100644
--- a/chat.c
+++ b/chat.c
@@ -307,6 +307,11 @@ int main(int argc, char *argv[]) {
 	uiDraw();
 	
 	int irc = ircConnect(bind, host, port);
+#ifdef __OpenBSD__
+	error = pledge("stdio rpath wpath cpath tty proc exec", NULL);
+	if (error) err(EX_OSERR, "pledge");
+#endif
+
 	if (pass) ircFormat("PASS :%s\r\n", pass);
 	if (sasl) ircFormat("CAP REQ :sasl\r\n");
 	ircFormat("CAP LS\r\n");