add unveil

1 files changed, 2 insertions, 0 deletions

diff --git a/main.c b/main.c
index 4ad1bf6..a9a9c5c 100644
--- a/main.c
+++ b/main.c
@@ -65,6 +65,8 @@ main(void)
 			  kcgi_strerror(parse_err));
 
 	/* A bit of security cannot hurt */
+	if (-1 == unveil(DATA_DIR, "r") || -1 == unveil(NULL, NULL))
+		http_exit(&r, KHTTP_500, "Unveil failed: %s", strerror(errno));
 	if (-1 == pledge("stdio rpath wpath cpath", NULL))
 		http_exit(&r, KHTTP_500, "Pledge failed: %s", strerror(errno));