1
0
Fork 0

Use stricter pledge promises if possible

This commit is contained in:
Andinus 2020-04-08 18:00:26 +05:30
parent e80b9a2c4a
commit 5243a7c955
Signed by: andinus
GPG Key ID: B67D55D482A799FD
1 changed files with 14 additions and 7 deletions

View File

@ -10,15 +10,22 @@ import (
)
func main() {
err := unix.PledgePromises("unveil stdio rpath")
panicOnErr(err)
// We need less permissions on these conditions.
if len(os.Args) == 1 ||
os.Args[1] == "version" ||
os.Args[1] == "env" {
err := unix.PledgePromises("stdio")
panicOnErr(err)
} else {
err := unix.PledgePromises("unveil stdio rpath")
panicOnErr(err)
unveil()
// Drop unveil from promises.
err = unix.PledgePromises("stdio rpath")
panicOnErr(err)
unveil()
// Drop unveil from promises.
err = unix.PledgePromises("stdio rpath")
panicOnErr(err)
}
grus()
}