From cf151fa0e1f18a5519883f7a358eb2330ae2685f Mon Sep 17 00:00:00 2001 From: Brian Gianforcaro Date: Thu, 23 Jan 2020 01:21:31 -0800 Subject: [PATCH] rpcdump: Use pledge() and unveil() --- Userland/rpcdump.cpp | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/Userland/rpcdump.cpp b/Userland/rpcdump.cpp index af2c021eb8..271c14e255 100644 --- a/Userland/rpcdump.cpp +++ b/Userland/rpcdump.cpp @@ -33,6 +33,18 @@ int main(int argc, char** argv) { + if (pledge("stdio unix cpath fattr", nullptr) < 0) { + perror("pledge"); + return 1; + } + + if (unveil("/tmp", "rwc") < 0) { + perror("unveil"); + return 1; + } + + unveil(nullptr, nullptr); + if (argc != 2) { printf("usage: %s \n", argv[0]); return 0; @@ -44,6 +56,11 @@ int main(int argc, char** argv) auto socket = CLocalSocket::construct(); + if (pledge("stdio unix", nullptr) < 0) { + perror("pledge"); + return 1; + } + socket->on_connected = [&] { dbg() << "Connected to PID " << pid;