From c93c56e4e558e1877cfcd85580a826a4002166eb Mon Sep 17 00:00:00 2001
From: Klemens Nanni <kn@openbsd.org>
Date: Fri, 22 Jan 2021 22:02:00 +0100
Subject: Drop network capability after ircConnect()

catgirl has no reconnect feature and generally must not do
anything but read/write from/to the connected socket which
does not require "inet" or "dns" promises.
---
 chat.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/chat.c b/chat.c
index 87daccd..bc035e3 100644
--- a/chat.c
+++ b/chat.c
@@ -307,6 +307,11 @@ int main(int argc, char *argv[]) {
 	uiDraw();
 	
 	int irc = ircConnect(bind, host, port);
+#ifdef __OpenBSD__
+	error = pledge("stdio rpath wpath cpath tty proc exec", NULL);
+	if (error) err(EX_OSERR, "pledge");
+#endif
+
 	if (pass) ircFormat("PASS :%s\r\n", pass);
 	if (sasl) ircFormat("CAP REQ :sasl\r\n");
 	ircFormat("CAP LS\r\n");
-- 
cgit 1.4.1