at present the setpriority() syscall is considered fairly low risk and

placed in pledge "proc".  pledge "stdio getpw proc", from Theo Buehler

diff --git a/usr.bin/renice/renice.c b/usr.bin/renice/renice.c
index 91b1bb6..28f3df5 100644 (file)
--- a/usr.bin/renice/renice.c
+++ b/usr.bin/renice/renice.c
@@ -1,4 +1,4 @@
-/*     $OpenBSD: renice.c,v 1.18 2015/05/15 19:34:31 jmc Exp $ */
+/*     $OpenBSD: renice.c,v 1.19 2015/10/22 07:52:29 deraadt Exp $     */
 
 /*
  * Copyright (c) 2009, 2015 Todd C. Miller <Todd.Miller@courtesan.com>
@@ -55,6 +55,9 @@ main(int argc, char **argv)
        char *ep, *idstr;
        const char *errstr;
 
+       if (pledge("stdio getpw proc", NULL) == -1)
+               err(1, "pledge");
+
        if (argc < 3)
                usage();