pledge() queue process

ok deraadt@

diff --git a/usr.sbin/smtpd/queue.c b/usr.sbin/smtpd/queue.c
index b264347..66cede6 100644 (file)
--- a/usr.sbin/smtpd/queue.c
+++ b/usr.sbin/smtpd/queue.c
@@ -1,4 +1,4 @@
-/*     $OpenBSD: queue.c,v 1.166 2015/01/20 17:37:54 deraadt Exp $     */
+/*     $OpenBSD: queue.c,v 1.167 2015/10/13 11:03:30 gilles Exp $      */
 
 /*
  * Copyright (c) 2008 Gilles Chehade <gilles@poolp.org>
@@ -643,6 +643,9 @@ queue(void)
        tv.tv_usec = 10;
        evtimer_add(&ev_qload, &tv);
 
+       if (pledge("stdio rpath wpath cpath recvfd sendfd", NULL) == -1)
+               err(1, "pledge");
+
        if (event_dispatch() <  0)
                fatal("event_dispatch");
        queue_shutdown();