Use stricter pledge promises if possible

This commit is contained in:
Andinus 2020-04-08 18:00:26 +05:30
parent e80b9a2c4a
commit 5243a7c955
Signed by: andinus
GPG Key ID: B67D55D482A799FD

View File

@ -10,6 +10,13 @@ import (
)
func main() {
// We need less permissions on these conditions.
if len(os.Args) == 1 ||
os.Args[1] == "version" ||
os.Args[1] == "env" {
err := unix.PledgePromises("stdio")
panicOnErr(err)
} else {
err := unix.PledgePromises("unveil stdio rpath")
panicOnErr(err)
@ -18,7 +25,7 @@ func main() {
// Drop unveil from promises.
err = unix.PledgePromises("stdio rpath")
panicOnErr(err)
}
grus()
}