commit 6098196c6b90226838737e2a1d83e09fa9834b8f
from: Stefan Sperling <stsp@stsp.name>
date: Fri Jan 04 16:33:31 2019 UTC

apply unveil(2) to 'got log'

commit - 0266afb7ba18cb28c0a7740924c386ab6a1d1aa4
commit + 6098196c6b90226838737e2a1d83e09fa9834b8f
blob - 1ff73e521fb88d1a7be986264e6ef38de25fd04e
blob + 7be0a15274d46d85639e6aded03f5b12f624e431
--- got/got.c
+++ got/got.c
@@ -718,7 +718,8 @@ cmd_log(int argc, char *argv[])
 	const char *errstr;
 
 #ifndef PROFILE
-	if (pledge("stdio rpath wpath cpath flock proc exec sendfd", NULL)
+	if (pledge("stdio rpath wpath cpath flock proc exec sendfd unveil",
+	    NULL)
 	    == -1)
 		err(1, "pledge");
 #endif
@@ -781,6 +782,10 @@ cmd_log(int argc, char *argv[])
 		}
 	}
 
+	error = apply_unveil(repo_path, NULL);
+	if (error)
+		goto done;
+
 	error = got_repo_open(&repo, repo_path);
 	if (error != NULL)
 		goto done;