OpenBSD top(1) adds flag to show chroot, pledge and unveil status

Contributed by Peter N. M. Hansteen on 2026-11-06 from the Q lifts the shroud dept.

With one recent commit, the top(1) command on OpenBSD became quite a bit more useful. The commit adds a new -Q flag to show each process' use of the chroot(2), pledge(2) and unveil(2) facilities.

The commit message reads,

List:       openbsd-cvs
Subject:    CVS: cvs.openbsd.org: src
From:       Klemens Nanni <kn () cvs ! openbsd ! org>
Date:       2026-11-05 17:54:16

CVSROOT:	/cvs
Module name:	src
Changes by:	kn@cvs.openbsd.org	2026/11/05 11:54:16

Modified files:
	usr.bin/top    : display.c machine.c machine.h top.1 top.c 

Log message:
add Q flag/key to show pledge/chroot/unveil usage

Show promises in COMMAND and ps(1) state letters pertaining to pledge,
chroot and unveil usage in PRIV instead of TIME.

To quickly identify programs (un)aware of their privileges and thus
in extend the system's security.

A non-root user it not enough and alternatives like ps(1) -o state,pledge
in tree-mode or wrapped in watch(1) are not nearly as ergonomic as top(1).

p and P are already in use, Q has no meaning, but is free.

OK deraadt

You will need to install a fresh snapshot in order to explore and enjoy this feature.

Latest Articles

Fri, Nov 06
- 10:49 OpenBSD top(1) adds flag to show chroot, pledge and unveil status (0)
Thu, Nov 05
- 10:40 OpenSSH 10.6p2 released (0)
Sun, Nov 01
- 11:56 Work on GEFS (the Good Enough File System) for OpenBSD progresses (2)
Sun, Oct 25
- 11:50 LibreSSL 4.4.0, 4.3.4, 4.2.3 released (0)
Thu, Oct 22
- 05:21 emulators/wine (re)entering OpenBSD ports (1)
Wed, Oct 21
- 19:17 dbupdate(8) added to -current (0)
Tue, Oct 20
- 02:14 OpenBSD 8.0 Released (0)
Mon, Oct 19
- 09:02 Game of Trees 0.130 released (0)
Sun, Oct 18
- 20:02 Introducing uncm(4) (0)

Credits

Copyright © 2004-2008 Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to April 2nd 2004 as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]