commit 8e94dd5baf6b3c0b02b5ca1cfacca1abeb4954c3
from: Stefan Sperling <stsp@stsp.name>
date: Fri Jan 04 16:41:30 2019 UTC

apply unveil(2) to 'tog blame'

commit - eb6600df992a05d6bfd1e3c07ee2d18427cb6286
commit + 8e94dd5baf6b3c0b02b5ca1cfacca1abeb4954c3
blob - 842187bfe46e04d7f18ec41db5d5295175ffe0ed
blob + 1154cf1290a9890041639576f70f2b42741a84e3
--- tog/tog.c
+++ tog/tog.c
@@ -2805,8 +2805,8 @@ cmd_blame(int argc, char *argv[])
 	struct tog_view *view;
 
 #ifndef PROFILE
-	if (pledge("stdio rpath wpath cpath flock proc tty exec sendfd", NULL)
-	    == -1)
+	if (pledge("stdio rpath wpath cpath flock proc tty exec sendfd unveil",
+	    NULL) == -1)
 		err(1, "pledge");
 #endif
 
@@ -2847,6 +2847,9 @@ cmd_blame(int argc, char *argv[])
 		}
 	}
 
+	error = apply_unveil(repo_path, NULL);
+	if (error)
+		goto done;
 
 	error = got_repo_open(&repo, repo_path);
 	if (error != NULL)