commit - 36e2fb666259aadac2fb2c9399346aeeec2825b8
commit + 0f8d269b44ff831a8b0d5b83912079814cd089fc
blob - 22776220a71fc2013bab3a8749966eef9f46b7ad
blob + d4231ab7fd2fa49502c2682203c13a5f74971865
--- got/got.c
+++ got/got.c
@@ -1140,8 +1140,8 @@ cmd_tree(int argc, char *argv[])
 	int ch;
 
 #ifndef PROFILE
-	if (pledge("stdio rpath wpath cpath flock proc exec sendfd", NULL)
-	    == -1)
+	if (pledge("stdio rpath wpath cpath flock proc exec sendfd unveil",
+	    NULL) == -1)
 		err(1, "pledge");
 #endif
 
@@ -1187,6 +1187,10 @@ cmd_tree(int argc, char *argv[])
 		}
 	}
 
+	error = apply_unveil(repo_path, NULL);
+	if (error)
+		goto done;
+
 	error = got_repo_open(&repo, repo_path);
 	if (error != NULL)
 		goto done;