OpenBSD top adds flag for chroot pledge unveil status
Original title: OpenBSD top(1) adds flag to show chroot, pledge and unveil status
The top utility now uses a -Q flag to display each process's pledge chroot and unveil usage for quick security posture assessment.
A commit adds the -Q flag to OpenBSD top(1). The flag shows promises in COMMAND and state letters, highlighting privileged processes in PRIV instead of TIME. This aids non-root users in identifying programs aware or unaware of security facilities like pledge unveil and chroot.
- Shows pledge usage in COMMAND and ps state letters
- Highlights privileged processes in PRIV column
- Ergonomic alternative to ps or watch for privilege checks
- 1.Install fresh snapshot
- 2.Use -Q flag to explore privilege usage
From the original article
1 min read at undeadly.orgWith one recent commit , the top(1) command on OpenBSD became quite a bit more useful. The commit adds a new -Q flag to show each process' use of the chroot(2) , pledge(2) and unveil(2) facilities. Show promises in COMMAND and ps(1) state letters pertaining to pledge, To quickly identify programs (un)aware of their privileges and thus
By undeadly.org via mairo · undeadly.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.