2 * Copyright (c) 2021 Omar Polo <op@omarpolo.com>
4 * Permission to use, copy, modify, and distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 #include "telescope.h"
27 sandbox_network_process(void)
29 if (pledge("stdio inet dns", NULL) == -1)
34 sandbox_ui_process(void)
36 if (pledge("stdio tty recvfd", NULL) == -1)
41 sandbox_fs_process(void)
45 if (unveil("/tmp", "rwc") == -1)
48 strlcpy(path, getenv("HOME"), sizeof(path));
49 strlcat(path, "/Downloads", sizeof(path));
50 if (unveil(path, "r") == -1)
53 strlcpy(path, getenv("HOME"), sizeof(path));
54 strlcat(path, "/.telescope/", sizeof(path));
55 if (unveil(path, "rwc") == -1)
58 if (pledge("stdio rpath wpath cpath sendfd", NULL) == -1)
64 #warning "No sandbox for this OS"
67 sandbox_network_process(void)
73 sandbox_ui_process(void)
79 sandbox_fs_process(void)