===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/script/script.c,v
retrieving revision 1.27
retrieving revision 1.28
diff -u -r1.27 -r1.28
--- src/usr.bin/script/script.c	2015/07/19 06:12:06	1.27
+++ src/usr.bin/script/script.c	2015/10/03 02:14:51	1.28
@@ -1,4 +1,4 @@
-/*	$OpenBSD: script.c,v 1.27 2015/07/19 06:12:06 deraadt Exp $	*/
+/*	$OpenBSD: script.c,v 1.28 2015/10/03 02:14:51 deraadt Exp $	*/
 /*	$NetBSD: script.c,v 1.3 1994/12/21 08:55:43 jtc Exp $	*/
 
 /*
@@ -165,6 +165,9 @@
 	sa.sa_handler = finish;
 	(void)sigaction(SIGCHLD, &sa, NULL);
 
+	if (tame("stdio ioctl", NULL) == -1)
+		err(1, "tame");
+
 	(void)fclose(fscript);
 	while (1) {
 		if (dead)
@@ -247,6 +250,9 @@
 	sigemptyset(&sa.sa_mask);
 	sa.sa_handler = SIG_IGN;
 	(void)sigaction(SIGCHLD, &sa, NULL);
+
+	if (tame("stdio", NULL) != 0)
+		err(1, "tame");
 
 	value.it_interval.tv_sec = 30;
 	value.it_interval.tv_usec = 0;