Proposal of sandboxing feature.

For now only used by the TLS server.

1 files changed, 6 insertions, 0 deletions

diff --git a/src/cli/tls_server.cpp b/src/cli/tls_server.cpp
index c8e6c58f3..7259c091b 100644
--- a/src/cli/tls_server.cpp
+++ b/src/cli/tls_server.cpp
@@ -87,6 +87,12 @@ class TLS_Server final : public Command, public Botan::TLS::Callbacks
 
          output() << "Listening for new connections on " << transport << " port " << port << std::endl;
 
+	 if(!Botan::OS::sandbox_start())
+            {
+            error_output() << "Failed sandboxing\n";
+	    return;
+	    }
+
          int server_fd = make_server_socket(port);
          size_t clients_served = 0;