commit ec5e90b332b7faee24b11167b737e188f50132a2
from: Omar Polo <op@omarpolo.com>
date: Sun Oct 20 20:04:41 2024 UTC

fix pledges; ui needs `sendfd'

we need to send a file descriptor to the net process when we use a
custom client certificate.  Don't know how I missed it...

commit - 7c9e12dfe9e21d4d4d9797a77ec89359808c7d22
commit + ec5e90b332b7faee24b11167b737e188f50132a2
blob - 629f87dee1f5e83d4b8de5239252a20d95b6a129
blob + c555958fd4247916148257b6bf439dbbbe40cb5b
--- sandbox.c
+++ sandbox.c
@@ -63,7 +63,7 @@ sandbox_ui_process(void)
 		err(1, "unveil(xdg-open)");
 #endif
 
-	if (pledge("stdio rpath wpath cpath unix tty proc exec",
+	if (pledge("stdio rpath wpath cpath unix sendfd tty proc exec",
 	    NULL) == -1)
 		err(1, "pledge");
 }