Add pledge(2) support (OpenBSD only) via a 'protector' package. (#1297)

2 files changed, 18 insertions, 0 deletions

diff --git a/src/protector/protector.go b/src/protector/protector.go
new file mode 100644
index 00000000..2739c016
--- /dev/null
+++ b/src/protector/protector.go
@@ -0,0 +1,8 @@
+// +build !openbsd
+
+package protector
+
+// Protect calls OS specific protections like pledge on OpenBSD
+func Protect() {
+	return
+}
diff --git a/src/protector/protector_openbsd.go b/src/protector/protector_openbsd.go
new file mode 100644
index 00000000..84a5ded1
--- /dev/null
+++ b/src/protector/protector_openbsd.go
@@ -0,0 +1,10 @@
+// +build openbsd
+
+package protector
+
+import "golang.org/x/sys/unix"
+
+// Protect calls OS specific protections like pledge on OpenBSD
+func Protect() {
+	unix.PledgePromises("stdio rpath tty proc exec")
+}