TextEditor: Tighten unveil

Only read access to the file_to_edit is required since
FileSystemAccessServer handles all other requests.
This commit is contained in:
Ralf Donau 2021-07-20 23:22:34 +02:00 committed by Gunnar Beutner
parent a34a9e8698
commit 6629af8bed
Notes: sideshowbarker 2024-07-18 08:38:46 +09:00

View File

@ -37,8 +37,9 @@ int main(int argc, char** argv)
FileArgument parsed_argument(file_to_edit);
file_to_edit_full_path = Core::File::real_path_for(parsed_argument.filename());
VERIFY(!file_to_edit_full_path.is_empty());
dbgln("unveil for: {}", file_to_edit_full_path);
if (unveil(file_to_edit_full_path.characters(), "rwc") < 0) {
if (unveil(file_to_edit_full_path.characters(), "r") < 0) {
perror("unveil");
return 1;
}