===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/encrypt/encrypt.c,v
retrieving revision 1.48
retrieving revision 1.49
diff -u -r1.48 -r1.49
--- src/usr.bin/encrypt/encrypt.c	2018/08/03 04:19:34	1.48
+++ src/usr.bin/encrypt/encrypt.c	2018/08/03 04:47:56	1.49
@@ -1,4 +1,4 @@
-/*	$OpenBSD: encrypt.c,v 1.48 2018/08/03 04:19:34 deraadt Exp $	*/
+/*	$OpenBSD: encrypt.c,v 1.49 2018/08/03 04:47:56 deraadt Exp $	*/
 
 /*
  * Copyright (c) 1996, Jason Downs.  All rights reserved.
@@ -95,6 +95,8 @@
 	char *extra = NULL;	/* Store login class or number of rounds */
 	const char *errstr;
 
+	if (unveil(_PATH_LOGIN_CONF, "r") == -1)
+		err(1, "unveil");
 	if (pledge("stdio rpath tty", NULL) == -1)
 		err(1, "pledge");