openbsd-ports/x11/gtk+3/patches/patch-gtk_updateiconcache_c
jasper 3c4a42e202 pledge three programs that get run on (nearly every) pkg_add using arbitrary
intput files.

prompted by bentley@
ok aja@ sthen@
2017-11-03 10:32:52 +00:00

18 lines
487 B
Plaintext

$OpenBSD: patch-gtk_updateiconcache_c,v 1.1 2017/11/03 10:32:53 jasper Exp $
Index: gtk/updateiconcache.c
--- gtk/updateiconcache.c.orig
+++ gtk/updateiconcache.c
@@ -1717,6 +1717,11 @@ main (int argc, char **argv)
path = g_locale_to_utf8 (path, -1, NULL, NULL, NULL);
#endif
+ if (pledge("stdio rpath wpath cpath fattr", NULL) == -1) {
+ g_printerr (_("pledge\n"));
+ exit (1);
+ }
+
if (validate)
{
gchar *file = g_build_filename (path, CACHE_NAME, NULL);