Use Capsicum if available

[tofuproxy.git] / cmd / zstd / capsicum.c.in

diff --git a/cmd/zstd/capsicum.c.in b/cmd/zstd/capsicum.c.in
new file mode 100644 (file)
index 0000000..a1ef0c7
--- /dev/null
+++ b/cmd/zstd/capsicum.c.in
@@ -0,0 +1,20 @@
+#include <err.h>
+#include <errno.h>
+#include <sysexits.h>
+
+#include <capsicum_helpers.h>
+#include <sys/capsicum.h>
+
+static void
+capsicum_start(void)
+{
+    if (caph_limit_stdio() != 0) {
+        errx(EX_OSERR, "can not caph_limit_stdio()");
+    }
+    if (cap_enter() != 0) {
+        perror("Not using Capsicum");
+        if (errno != ENOSYS) {
+            exit(EXIT_FAILURE);
+        }
+    }
+}