From 348f101837f9f435ff52fefd58d7ea14b756c87c Mon Sep 17 00:00:00 2001 From: Andinus Date: Sat, 25 Apr 2020 17:26:25 +0530 Subject: Add pledge functions --- pledge.go | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 pledge.go diff --git a/pledge.go b/pledge.go new file mode 100644 index 0000000..8e6e450 --- /dev/null +++ b/pledge.go @@ -0,0 +1,26 @@ +package main + +import ( + "fmt" + "os" + + "tildegit.org/andinus/lynx" +) + +// initPledge initializes pledge for initial use. +func initPledge() { + // Pledge promises can only be dropped & we cannot add + // anything so this call adds everything that maybe used in + // program later. We don't define execpromises here because + // that comes from the user. + // + // Note: Don't forget to change blockUnveil() if you add + // anything new here. + err := lynx.PledgePromises("unveil stdio rpath exec") + if err != nil { + fmt.Printf("%s :: %s", + "initPledge failed", + err.Error()) + os.Exit(1) + } +} -- cgit 1.4.1-2-gfad0