move all sandbox-related code to sandbox.c

while there, add capsicum for the logger process

1 files changed, 1 insertions, 1 deletions

diff --git a/server.c b/server.c
index b059412..0080b17 100644
--- a/server.c
+++ b/server.c
@@ -1129,7 +1129,7 @@ loop(struct tls *ctx_, int sock4, int sock6, struct imsgbuf *ibuf)
 	signal_set(&sigusr2, SIGUSR2, &handle_siginfo, NULL);
 	signal_add(&sigusr2, NULL);
 
-	sandbox();
+	sandbox_server_process();
 	event_dispatch();
 	_exit(0);
 }