Add pledge functions

1 files changed, 26 insertions, 0 deletions

diff --git a/pledge.go b/pledge.go
new file mode 100644
index 0000000..8e6e450
--- /dev/null
+++ b/pledge.go
@@ -0,0 +1,26 @@
+package main
+
+import (
+	"fmt"
+	"os"
+
+	"tildegit.org/andinus/lynx"
+)
+
+// initPledge initializes pledge for initial use.
+func initPledge() {
+	// Pledge promises can only be dropped & we cannot add
+	// anything so this call adds everything that maybe used in
+	// program later. We don't define execpromises here because
+	// that comes from the user.
+	//
+	// Note: Don't forget to change blockUnveil() if you add
+	// anything new here.
+	err := lynx.PledgePromises("unveil stdio rpath exec")
+	if err != nil {
+		fmt.Printf("%s :: %s",
+			"initPledge failed",
+			err.Error())
+		os.Exit(1)
+	}
+}