===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/su/su.c,v
retrieving revision 1.71
retrieving revision 1.72
diff -u -r1.71 -r1.72
--- src/usr.bin/su/su.c	2018/08/23 16:52:13	1.71
+++ src/usr.bin/su/su.c	2018/10/21 13:18:19	1.72
@@ -1,4 +1,4 @@
-/*	$OpenBSD: su.c,v 1.71 2018/08/23 16:52:13 deraadt Exp $	*/
+/*	$OpenBSD: su.c,v 1.72 2018/10/21 13:18:19 deraadt Exp $	*/
 
 /*
  * Copyright (c) 1988 The Regents of the University of California.
@@ -163,6 +163,8 @@
 	if (unveil(_PATH_LOGIN_CONF, "r") == -1)
 		err(1, "unveil");
 	if (unveil(_PATH_AUTHPROGDIR, "x") == -1)
+		err(1, "unveil");
+	if (unveil(_PATH_SHELLS, "r") == -1)
 		err(1, "unveil");
 
 	for (;;) {