pledge() on OpenBSD

dnscrypt-proxy/main.go

@@ -25,6 +25,8 @@ type App struct {
 func main() {
 	dlog.Init("dnscrypt-proxy", dlog.SeverityNotice, "DAEMON")
 
+	Pledge()
+
 	pwd, err := os.Getwd()
 	if err != nil {
 		dlog.Fatal("Unable to find the path to the current directory")

dnscrypt-proxy/pledge_openbsd.go

@@ -0,0 +1,10 @@
+// +build openbsd
+
+package main
+
+import "unix"
+
+func Pledge() {
+	unix.Pledge("stdio rpath wpath cpath tmppath inet fattr flock dns getpw sendfd recvfd proc exec id",
+		"stdio rpath wpath cpath tmppath inet fattr flock dns recvfd")
+}

dnscrypt-proxy/pledge_others.go

@@ -0,0 +1,7 @@
+// +build !openbsd
+
+package main
+
+func Pledge() {
+
+}