we don't need unveil "x" in listener

not a big deal, since the pledge prohibits us to exec, but
nevertheless.

1 files changed, 1 insertions, 1 deletions

diff --git a/sandbox.c b/sandbox.c
index 030112b..cf6ee8b 100644
--- a/sandbox.c
+++ b/sandbox.c
@@ -245,7 +245,7 @@ sandbox()
 	struct vhost *h;
 
 	for (h = hosts; h->domain != NULL; ++h) {
-		if (unveil(h->dir, "rx") == -1)
+		if (unveil(h->dir, "r") == -1)
 			err(1, "unveil %s for domain %s", h->dir, h->domain);
 	}