From 2ad275d20f820797c36d7e75090d04e260fd8b12 Mon Sep 17 00:00:00 2001
From: Mariusz Zaborski <oshogbo@FreeBSD.org>
Date: Sat, 17 Feb 2018 12:32:53 +0000
Subject: Capsicumize uuidgen.

---
 bin/uuidgen/uuidgen.c | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'bin/uuidgen/uuidgen.c')

diff --git a/bin/uuidgen/uuidgen.c b/bin/uuidgen/uuidgen.c
index af1e7299eed8..23a6fa42bad8 100644
--- a/bin/uuidgen/uuidgen.c
+++ b/bin/uuidgen/uuidgen.c
@@ -28,6 +28,9 @@
 #include <sys/cdefs.h>
 __FBSDID("$FreeBSD$");
 
+#include <sys/capsicum.h>
+
+#include <capsicum_helpers.h>
 #include <err.h>
 #include <stdio.h>
 #include <stdlib.h>
@@ -80,6 +83,12 @@ main(int argc, char *argv[])
 	if (argc)
 		usage();
 
+	caph_cache_catpages();
+	if (caph_limit_stdio() < 0)
+		err(1, "Unable to limit stdio");
+	if (cap_enter() < 0 && errno != ENOSYS)
+		err(1, "Unable to enter capability mode");
+
 	if (count == -1)
 		count = 1;
 
-- 
cgit v1.2.3