Restrict systems operations on OpenBSD

configure.ac

@@ -45,7 +45,6 @@ if test "x$valgrind_cmd" = "x" ; then
     AC_MSG_WARN([valgrind is required to test jq.])
 fi
 AC_CHECK_FUNCS(memmem)
-AC_CHECK_FUNCS(mkstemp)
 
 AC_CHECK_HEADER("sys/cygwin.h", [have_cygwin=1;])
 AC_CHECK_HEADER("shlwapi.h",[have_shlwapi=1;])

src/main.c

@@ -324,6 +324,13 @@ int main(int argc, char* argv[]) {
   (void) setlocale(LC_ALL, "");
 #endif
 
+#ifdef __OpenBSD__
+  if (pledge("stdio rpath", NULL) == -1) {
+    perror("pledge");
+    exit(JQ_ERROR_SYSTEM);
+  }
+#endif
+
 #ifdef WIN32
   jv_tsd_dtoa_ctx_init();
   fflush(stdout);

src/util.c

@@ -79,27 +79,6 @@ FILE *fopen(const char *fname, const char *mode) {
 }
 #endif
 
-#ifndef HAVE_MKSTEMP
-int mkstemp(char *template) {
-  size_t len = strlen(template);
-  int tries=5;
-  int fd;
-
-  // mktemp() truncates template when it fails
-  char *s = alloca(len + 1);
-  assert(s != NULL);
-  strcpy(s, template);
-
-  do {
-    // Restore template
-    strcpy(template, s);
-    (void) mktemp(template);
-    fd = open(template, O_CREAT | O_EXCL | O_RDWR, 0600);
-  } while (fd == -1 && tries-- > 0);
-  return fd;
-}
-#endif
-
 jv expand_path(jv path) {
   assert(jv_get_kind(path) == JV_KIND_STRING);
   const char *pstr = jv_string_value(path);

src/util.h

@@ -13,10 +13,6 @@
 
 #include "jv.h"
 
-#ifndef HAVE_MKSTEMP
-int mkstemp(char *template);
-#endif
-
 jv expand_path(jv);
 jv get_home(void);
 jv jq_realpath(jv);