diff options
| author | June McEnroe <june@causal.agency> | 2021-09-24 23:38:05 -0400 |
|---|---|---|
| committer | June McEnroe <june@causal.agency> | 2021-09-24 23:38:05 -0400 |
| commit | 2f6cd6f79992a28b6908b03844050a0bd251b7bf (patch) | |
| tree | b2e10950f6c121594658e76c76198dcfc6c17cee /bin | |
| parent | Set original socket CLOEXEC (diff) | |
| download | src-2f6cd6f79992a28b6908b03844050a0bd251b7bf.tar.gz src-2f6cd6f79992a28b6908b03844050a0bd251b7bf.zip | |
Pledge downgrade
Diffstat (limited to 'bin')
| -rw-r--r-- | bin/downgrade.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/bin/downgrade.c b/bin/downgrade.c index 871b3eb4..31019714 100644 --- a/bin/downgrade.c +++ b/bin/downgrade.c @@ -312,6 +312,11 @@ int main(int argc, char *argv[]) { if (error) errx(EX_PROTOCOL, "tls_handshake: %s", tls_error(client)); tls_config_clear_keys(config); +#ifdef __OpenBSD__ + error = pledge("stdio", NULL); + if (error) err(EX_OSERR, "pledge"); +#endif + #ifdef __FreeBSD__ error = caph_enter() || caph_limit_stdio(); if (error) err(EX_OSERR, "caph_enter"); |