summary refs log tree commit diff stats
diff options
context:
space:
mode:
authorAndinus <andinus@nand.sh>2020-04-25 19:39:14 +0530
committerAndinus <andinus@nand.sh>2020-04-25 19:39:14 +0530
commitda1d5980e285a52d30ed7a122553ec947b028b71 (patch)
treec9e7d1dea18107f19474f00023c53a2673947a43
parent677b37308119a71232384f2d52c1b41e460005fa (diff)
downloadpavo-da1d5980e285a52d30ed7a122553ec947b028b71.tar.gz
Don't drop rpath & proc promise
-rw-r--r--unveil.go2
1 files changed, 1 insertions, 1 deletions
diff --git a/unveil.go b/unveil.go
index b50c438..924c21e 100644
--- a/unveil.go
+++ b/unveil.go
@@ -19,7 +19,7 @@ func blockUnveil() {
 
 	// We drop unveil from promises after blocking it. We drop
 	// rpath too because the config file has been read.
-	err = lynx.PledgePromises("stdio exec")
+	err = lynx.PledgePromises("stdio rpath exec proc")
 	if err != nil {
 		fmt.Printf("%s :: %s",
 			"blockUnveil failed",