about summary refs log tree commit diff
path: root/minc.c
diff options
context:
space:
mode:
authorTim Kuijsten <info+git@netsend.nl>2019-11-21 02:15:41 +0100
committerLeah Neukirchen <leah@vuxu.org>2020-09-06 16:34:56 +0200
commit4763032430834ff1d7dfe4293826cf845a71b990 (patch)
tree113205e6ce5f84eaf5df1c9347ba0187fa93f3ed /minc.c
parent6bd687bfdc44bafdc18b96eaec0995e3254536f6 (diff)
downloadmblaze-4763032430834ff1d7dfe4293826cf845a71b990.tar.gz
mblaze-4763032430834ff1d7dfe4293826cf845a71b990.tar.xz
mblaze-4763032430834ff1d7dfe4293826cf845a71b990.zip
pledge(2) all programs
All programs except mshow have a very tight set of promises. mshow
has a broad set of promises and might be a good future candidate
to further restrict using unveil(2).

This patch is based on commit 0300a112 by Alex Holst (dated
2017-12-07), which was proposed in GH PR #79.

* pledged mpick, mflow and mdate so that now all programs are pledged
* removed some unneeded promises and added some missing promises
* move err.h include and OpenBSD ifdef into a new xpledge.h
* cleaned up code aligning and whitespace

Closes: #179 [via git-merge-pr]
Diffstat (limited to 'minc.c')
-rw-r--r--minc.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/minc.c b/minc.c
index f495da1..c1d28fd 100644
--- a/minc.c
+++ b/minc.c
@@ -12,6 +12,7 @@
 
 #include "blaze822.h"
 #include "blaze822_priv.h"
+#include "xpledge.h"
 
 static int qflag;
 static int status;
@@ -76,6 +77,8 @@ usage:
 	if (optind == argc)
 		goto usage;
 
+	xpledge("stdio rpath cpath", "");
+
 	status = 0;
 	for (i = optind; i < argc; i++)
 		inc(argv[i]);