1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-25 06:47:35 +00:00

RequestServer: Tighten pledged promises

This commit is contained in:
bugreport0 2021-12-12 19:41:57 +01:00 committed by Andreas Kling
parent 1d6ed50dd0
commit 0d78693b6a

View file

@ -20,15 +20,15 @@
ErrorOr<int> serenity_main(Main::Arguments)
{
TRY(Core::System::pledge("stdio inet accept unix rpath sendfd recvfd sigaction"));
signal(SIGINFO, [](int) { RequestServer::ConnectionCache::dump_jobs(); });
TRY(Core::System::pledge("stdio inet accept unix rpath sendfd recvfd"));
// Ensure the certificates are read out here.
[[maybe_unused]] auto& certs = DefaultRootCACertificates::the();
TRY(Core::System::pledge("stdio inet accept unix sendfd recvfd"));
Core::EventLoop event_loop;
// FIXME: Establish a connection to LookupServer and then drop "unix"?
TRY(Core::System::pledge("stdio inet accept unix sendfd recvfd"));
TRY(Core::System::unveil("/tmp/portal/lookup", "rw"));
TRY(Core::System::unveil(nullptr, nullptr));