move all sandbox-related code to sandbox.c

while there, add capsicum for the logger process

1 files changed, 1 insertions, 4 deletions

diff --git a/log.c b/log.c
index b66aa19..2ff2158 100644
--- a/log.c
+++ b/log.c
@@ -270,10 +270,7 @@ logger_main(int fd, struct imsgbuf *ibuf)
 	event_set(&imsgev, fd, EV_READ | EV_PERSIST, &handle_dispatch_imsg, ibuf);
 	event_add(&imsgev, NULL);
 
-#ifdef __OpenBSD__
-	if (pledge("stdio", NULL) == -1)
-		err(1, "pledge");
-#endif
+	sandbox_logger_process();
 
 	event_dispatch();