===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/script/script.c,v
retrieving revision 1.27
retrieving revision 1.28
diff -c -r1.27 -r1.28
*** src/usr.bin/script/script.c	2015/07/19 06:12:06	1.27
--- src/usr.bin/script/script.c	2015/10/03 02:14:51	1.28
***************
*** 1,4 ****
! /*	$OpenBSD: script.c,v 1.27 2015/07/19 06:12:06 deraadt Exp $	*/
  /*	$NetBSD: script.c,v 1.3 1994/12/21 08:55:43 jtc Exp $	*/
  
  /*
--- 1,4 ----
! /*	$OpenBSD: script.c,v 1.28 2015/10/03 02:14:51 deraadt Exp $	*/
  /*	$NetBSD: script.c,v 1.3 1994/12/21 08:55:43 jtc Exp $	*/
  
  /*
***************
*** 165,170 ****
--- 165,173 ----
  	sa.sa_handler = finish;
  	(void)sigaction(SIGCHLD, &sa, NULL);
  
+ 	if (tame("stdio ioctl", NULL) == -1)
+ 		err(1, "tame");
+ 
  	(void)fclose(fscript);
  	while (1) {
  		if (dead)
***************
*** 247,252 ****
--- 250,258 ----
  	sigemptyset(&sa.sa_mask);
  	sa.sa_handler = SIG_IGN;
  	(void)sigaction(SIGCHLD, &sa, NULL);
+ 
+ 	if (tame("stdio", NULL) != 0)
+ 		err(1, "tame");
  
  	value.it_interval.tv_sec = 30;
  	value.it_interval.tv_usec = 0;