2 * Copyright (c) 2021 Omar Polo <op@omarpolo.com>
4 * Permission to use, copy, modify, and distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20 #if defined(__OpenBSD__)
25 sandbox_main_process(void)
27 if (pledge("stdio rpath inet dns sendfd proc", NULL) == -1)
32 sandbox_server_process(void)
37 TAILQ_FOREACH(h, &hosts, vhosts) {
38 TAILQ_FOREACH(l, &h->locations, locations) {
42 if (unveil(l->dir, "rw") == -1)
43 fatal("unveil %s for domain %s",
49 if (pledge("stdio recvfd rpath unix inet dns", NULL) == -1)
54 sandbox_logger_process(void)
56 if (pledge("stdio recvfd", NULL) == -1)
62 #warning "No sandbox method known for this OS"
65 sandbox_server_process(void)
71 sandbox_logger_process(void)