blob: 90eaf8b891593fe864d06f9422be1d9118872dfa (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
|
/*
* (C) 2019 David Carlier <devnexen@gmail.com>
*
* Botan is released under the Simplified BSD License (see license.txt)
*/
#include "sandbox.h"
#include <botan/build.h>
#if defined(BOTAN_TARGET_OS_HAS_PLEDGE)
#include <unistd.h>
#elif defined(BOTAN_TARGET_OS_HAS_CAP_ENTER)
#include <sys/capsicum.h>
#endif
namespace Botan_CLI {
Sandbox::Sandbox()
{
#if defined(BOTAN_TARGET_OS_HAS_PLEDGE)
m_name = "pledge";
#elif defined(BOTAN_TARGET_OS_HAS_CAP_ENTER)
m_name = "capsicum";
#else
m_name = "<none>";
#endif
}
bool Sandbox::init()
{
#if defined(BOTAN_TARGET_OS_HAS_PLEDGE)
const static char *opts = "stdio rpath inet error";
return (::pledge(opts, nullptr) == 0);
#elif defined(BOTAN_TARGET_OS_HAS_CAP_ENTER)
return (::cap_enter() == 0);
#else
return true;
#endif
}
Sandbox::~Sandbox()
{
}
}
|
