summary refs log tree commit diff
diff options
context:
space:
mode:
authorJune McEnroe <june@causal.agency>2021-01-14 21:45:37 +0000
committerJune McEnroe <june@causal.agency>2021-01-14 21:46:10 +0000
commit5ecc15004016e00bd37110e1e7eba82e17673ae8 (patch)
treea600ef38bef39856d20f14adda8f2cff42c4073d
parentAdd dirent.h to c.sh includes (diff)
downloadsrc-5ecc15004016e00bd37110e1e7eba82e17673ae8.tar.gz
src-5ecc15004016e00bd37110e1e7eba82e17673ae8.zip
Call cap_rights_limit on stderr too
-rw-r--r--www/text.causal.agency/igp.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/www/text.causal.agency/igp.c b/www/text.causal.agency/igp.c
index b9e7241b..cda604d8 100644
--- a/www/text.causal.agency/igp.c
+++ b/www/text.causal.agency/igp.c
@@ -70,6 +70,7 @@ int main(int argc, char *argv[]) {
 	error = cap_enter()
 		|| cap_rights_limit(STDIN_FILENO, cap_rights_init(&cap, CAP_READ))
 		|| cap_rights_limit(STDOUT_FILENO, cap_rights_init(&cap, CAP_WRITE))
+		|| cap_rights_limit(STDERR_FILENO, &cap)
 		|| cap_rights_limit(
 			root, cap_rights_init(&cap, CAP_PREAD, CAP_FSTATAT, CAP_FSTATFS)
 		);