AI generated web server that is restricted to /tmp on OpenBSD and Linux

server.go

package main

import (
    "log"
    "net/http"
    "os"

    "golang.org/x/sys/unix"
)

func main() {
    // Use OpenBSD's unveil system call to restrict file access to /tmp.
    if err := unix.Unveil("/tmp", "r"); err != nil {
        log.Fatal(err)
    }
    if err := unix.UnveilBlock(); err != nil {
        log.Fatal(err)
    }

    // Use Linux's landlock system call to restrict visibility to /tmp.
    if err := unix.Landlock(0, unix.MCL_CURRENT|unix.MCL_FUTURE, unix.LANDLOCK_VERBOSE); err != nil {
        log.Fatal(err)
    }

    // Serve static files from /tmp.
    http.Handle("/", http.FileServer(http.Dir("/tmp")))

    // Listen and serve on localhost:8080.
    if err := http.ListenAndServe(":8080", nil); err != nil {
        log.Fatal(err)
    }
}