mirror of
				https://github.com/RGBCube/serenity
				synced 2025-10-31 20:32:44 +00:00 
			
		
		
		
	 c93f73c617
			
		
	
	
		c93f73c617
		
	
	
	
	
		
			
			Remove unveil on / with only browse permissions. Unveil will be sealed later when the root path of project is known.
		
			
				
	
	
		
			57 lines
		
	
	
	
		
			1.3 KiB
		
	
	
	
		
			C++
		
	
	
	
	
	
			
		
		
	
	
			57 lines
		
	
	
	
		
			1.3 KiB
		
	
	
	
		
			C++
		
	
	
	
	
	
| /*
 | |
|  * Copyright (c) 2021, Itamar S. <itamar8910@gmail.com>
 | |
|  *
 | |
|  * SPDX-License-Identifier: BSD-2-Clause
 | |
|  */
 | |
| 
 | |
| #include "ClientConnection.h"
 | |
| #include "Tests.h"
 | |
| #include <AK/LexicalPath.h>
 | |
| #include <LibCore/ArgsParser.h>
 | |
| #include <LibCore/EventLoop.h>
 | |
| #include <LibCore/File.h>
 | |
| #include <LibCore/LocalServer.h>
 | |
| #include <LibIPC/ClientConnection.h>
 | |
| #include <sys/stat.h>
 | |
| #include <unistd.h>
 | |
| 
 | |
| static int mode_server();
 | |
| 
 | |
| int main(int argc, char** argv)
 | |
| {
 | |
|     bool tests = false;
 | |
| 
 | |
|     Core::ArgsParser parser;
 | |
|     parser.add_option(tests, "Run tests", "tests", 't');
 | |
|     parser.parse(argc, argv);
 | |
| 
 | |
|     if (tests) {
 | |
|         return run_tests();
 | |
|     }
 | |
| 
 | |
|     return mode_server();
 | |
| }
 | |
| 
 | |
| int mode_server()
 | |
| {
 | |
|     Core::EventLoop event_loop;
 | |
|     if (pledge("stdio unix recvfd rpath ", nullptr) < 0) {
 | |
|         perror("pledge");
 | |
|         return 1;
 | |
|     }
 | |
| 
 | |
|     auto socket = Core::LocalSocket::take_over_accepted_socket_from_system_server();
 | |
|     IPC::new_client_connection<LanguageServers::Cpp::ClientConnection>(socket.release_nonnull(), 1);
 | |
|     if (pledge("stdio recvfd rpath", nullptr) < 0) {
 | |
|         perror("pledge");
 | |
|         return 1;
 | |
|     }
 | |
| 
 | |
|     if (unveil("/usr/include", "r") < 0) {
 | |
|         perror("unveil");
 | |
|         return 1;
 | |
|     }
 | |
| 
 | |
|     // unveil will be sealed later, when we know the project's root path.
 | |
|     return event_loop.exec();
 | |
| }
 |