From 5ecc15004016e00bd37110e1e7eba82e17673ae8 Mon Sep 17 00:00:00 2001 From: June McEnroe Date: Thu, 14 Jan 2021 21:45:37 +0000 Subject: Call cap_rights_limit on stderr too --- www/text.causal.agency/igp.c | 1 + 1 file changed, 1 insertion(+) (limited to 'www') diff --git a/www/text.causal.agency/igp.c b/www/text.causal.agency/igp.c index b9e7241b..cda604d8 100644 --- a/www/text.causal.agency/igp.c +++ b/www/text.causal.agency/igp.c @@ -70,6 +70,7 @@ int main(int argc, char *argv[]) { error = cap_enter() || cap_rights_limit(STDIN_FILENO, cap_rights_init(&cap, CAP_READ)) || cap_rights_limit(STDOUT_FILENO, cap_rights_init(&cap, CAP_WRITE)) + || cap_rights_limit(STDERR_FILENO, &cap) || cap_rights_limit( root, cap_rights_init(&cap, CAP_PREAD, CAP_FSTATAT, CAP_FSTATFS) ); -- cgit 1.4.1