diff options
| -rwxr-xr-x | reolink/reolink | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/reolink/reolink b/reolink/reolink index 0ee690e..b932af9 100755 --- a/reolink/reolink +++ b/reolink/reolink @@ -729,13 +729,14 @@ sub run { main::load_params (\%server_params); unless ($debug) { - pledge (qw/rpath wpath cpath inet exec proc unix unveil/) or die "Failed to pledge: $!"; + pledge (qw/rpath wpath cpath inet exec proc prot_exec unix unveil/) or die "Failed to pledge: $!"; openlog ('reolink', 'PID', LOG_DAEMON); message ('startup'); $SIG{__DIE__} = sub { syslog (LOG_CRIT, "fatal: @_") }; daemonize; + unveil ($_, 'rx') || die "unveil($_): $!" foreach @INC; unveil ($server_params{spool_dir}, 'rwxc') || die "unveil($server_params{spool_dir}): $!"; unveil ($global_config->{socket}, 'rwc') || die "unveil($global_config->{socket}): $!"; unveil ($global_config->{config}, 'rwc') || die "unveil($global_config->{config}): $!"; |