=================================================================== RCS file: /cvs2/dgamelaunch-openbsd/dgamelaunch.c,v retrieving revision 1.4 retrieving revision 1.5 diff -u -p -r1.4 -r1.5 --- dgamelaunch-openbsd/dgamelaunch.c 2021/03/15 14:49:34 1.4 +++ dgamelaunch-openbsd/dgamelaunch.c 2021/03/25 21:01:26 1.5 @@ -2865,6 +2865,8 @@ main (int argc, char** argv) graceful_exit (3); } + + /* shed privs. this is done immediately after chroot. */ if (setgroups (1, &globalconfig.shed_gid) == -1) { @@ -2883,6 +2885,16 @@ main (int argc, char** argv) perror ("setuid"); graceful_exit (6); } + +#ifdef __OpenBSD__ + if ( pledge("stdio rpath wpath cpath fattr flock " + "tty proc exec ps", NULL )==-1 ) + { + perror("pledge"); + graceful_exit (301); + } +#endif + } if (globalconfig.locale) {