commit da6e9a4f73606c63eaee7d80f6460a94d39a88d5
Author: Klemens Nanni <[email protected]>
Date: Sun May 20 14:58:30 2018 +0200
[dwm] Add pledge patch
diff --git a/dwm.suckless.org/patches/pledge/dwm-pledge-20180522-c8e9479.diff
b/dwm.suckless.org/patches/pledge/dwm-pledge-20180522-c8e9479.diff
new file mode 100644
index 00000000..20a24309
--- /dev/null
+++ b/dwm.suckless.org/patches/pledge/dwm-pledge-20180522-c8e9479.diff
@@ -0,0 +1,13 @@
+diff --git a/dwm.c b/dwm.c
+index bb95e26..abfb097 100644
+--- a/dwm.c
++++ b/dwm.c
+@@ -2137,6 +2137,8 @@ main(int argc, char *argv[])
+ die("dwm: cannot open display");
+ checkotherwm();
+ setup();
++ if (pledge("stdio proc exec", NULL) == -1)
++ die("pledge");
+ scan();
+ run();
+ cleanup();
diff --git a/dwm.suckless.org/patches/pledge/dwm-pledge-6.1.diff
b/dwm.suckless.org/patches/pledge/dwm-pledge-6.1.diff
new file mode 100644
index 00000000..dbbb16a2
--- /dev/null
+++ b/dwm.suckless.org/patches/pledge/dwm-pledge-6.1.diff
@@ -0,0 +1,12 @@
+Index: dwm.c
+--- dwm.c.orig
++++ dwm.c
+@@ -2133,6 +2133,8 @@ main(int argc, char *argv[])
+ die("dwm: cannot open display
");
+ checkotherwm();
+ setup();
++ if (pledge("stdio proc exec", NULL) == -1)
++ die("pledge
");
+ scan();
+ run();
+ cleanup();
diff --git a/dwm.suckless.org/patches/pledge/index.md
b/dwm.suckless.org/patches/pledge/index.md
new file mode 100644
index 00000000..32a575a2
--- /dev/null
+++ b/dwm.suckless.org/patches/pledge/index.md
@@ -0,0 +1,18 @@
+pledge
+======
+
+Description
+-----------
+
+Restrict system operations on OpenBSD using
[pledge(2)](https://man.openbsd.org/pledge).
+
+Download
+--------
+
+ * [dwm-pledge-6.1.diff](dwm-pledge-6.1.diff)
+ * [dwm-pledge-20180522-c8e9479.diff](dwm-pledge-20180522-c8e9479.diff)
+
+Authors
+-------
+
+ * Klemens Nanni <[email protected]>
