mirror of
https://github.com/leahneukirchen/mblaze
synced 2024-11-13 07:10:26 +00:00
4763032430
All programs except mshow have a very tight set of promises. mshow
has a broad set of promises and might be a good future candidate
to further restrict using unveil(2).
This patch is based on commit 0300a112 by Alex Holst (dated
2017-12-07), which was proposed in GH PR #79.
* pledged mpick, mflow and mdate so that now all programs are pledged
* removed some unneeded promises and added some missing promises
* move err.h include and OpenBSD ifdef into a new xpledge.h
* cleaned up code aligning and whitespace
Closes: #179 [via git-merge-pr]
27 lines
389 B
C
27 lines
389 B
C
#ifndef PLEDGE_H
|
|
#define PLEDGE_H
|
|
|
|
#ifdef __OpenBSD__
|
|
|
|
#ifndef _BSD_SOURCE
|
|
#define _BSD_SOURCE
|
|
#endif
|
|
|
|
#include <err.h>
|
|
#include <unistd.h>
|
|
|
|
static void
|
|
xpledge(const char *promises, const char *execpromises)
|
|
{
|
|
if (pledge(promises, execpromises) == -1)
|
|
err(1, "pledge");
|
|
}
|
|
|
|
#else
|
|
|
|
#define xpledge(promises, execpromises) do { } while(0)
|
|
|
|
#endif /* __OpenBSD__ */
|
|
|
|
#endif /* PLEDGE_H */
|