WebServer: Tighten things up with pledge() and unveil()

1 files changed, 20 insertions, 0 deletions

diff --git a/Servers/WebServer/main.cpp b/Servers/WebServer/main.cpp
index 36a207309c..6c63c1244e 100644
--- a/Servers/WebServer/main.cpp
+++ b/Servers/WebServer/main.cpp
@@ -1,12 +1,19 @@
 #include "Client.h"
 #include <LibCore/EventLoop.h>
 #include <LibCore/TCPServer.h>
+#include <stdio.h>
+#include <unistd.h>
 
 int main(int argc, char** argv)
 {
     (void)argc;
     (void)argv;
 
+    if (pledge("stdio accept rpath inet unix cpath fattr", nullptr) < 0) {
+        perror("pledge");
+        return 1;
+    }
+
     Core::EventLoop loop;
 
     auto server = Core::TCPServer::construct();
@@ -19,5 +26,18 @@ int main(int argc, char** argv)
     };
 
     server->listen({}, 8000);
+
+    if (unveil("/www", "r") < 0) {
+        perror("unveil");
+        return 1;
+    }
+
+    unveil(nullptr, nullptr);
+
+    if (pledge("stdio accept rpath", nullptr) < 0) {
+        perror("pledge");
+        return 1;
+    }
+
     return loop.exec();
 }