From a1bcdc225e1c9b890214fcea3d19d85226fc552a Mon Sep 17 00:00:00 2001
From: Aaron Bieber <aaron@bolddaemon.com>
Date: Sat, 18 Jan 2020 22:13:32 -0700
Subject: Add pledge(2) support (OpenBSD only) via a 'protector' package.
 (#1297)

---
 src/protector/protector_openbsd.go | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 src/protector/protector_openbsd.go

(limited to 'src/protector/protector_openbsd.go')

diff --git a/src/protector/protector_openbsd.go b/src/protector/protector_openbsd.go
new file mode 100644
index 00000000..84a5ded1
--- /dev/null
+++ b/src/protector/protector_openbsd.go
@@ -0,0 +1,10 @@
+// +build openbsd
+
+package protector
+
+import "golang.org/x/sys/unix"
+
+// Protect calls OS specific protections like pledge on OpenBSD
+func Protect() {
+	unix.PledgePromises("stdio rpath tty proc exec")
+}
-- 
cgit v1.2.3