tmux can call pledge() in main with large set and then reduce it

slightly in the server to "stdio rpath wpath cpath fattr unix recvfd
proc exec tty ps".

1 files changed, 4 insertions, 0 deletions

diff --git a/server.c b/server.c
index ff38a353..7ce1c99d 100644
--- a/server.c
+++ b/server.c
@@ -178,6 +178,10 @@ server_start(struct event_base *base, int lockfd, char *lockfile)
 	}
 	close(pair[0]);
 
+	if (pledge("stdio rpath wpath cpath fattr unix recvfd proc exec tty "
+	    "ps", NULL) != 0)
+		fatal("pledge failed");
+
 	/*
 	 * Must daemonise before loading configuration as the PID changes so
 	 * $TMUX would be wrong for sessions created in the config file.