===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/users/users.c,v
retrieving revision 1.13
retrieving revision 1.14
diff -u -r1.13 -r1.14
--- src/usr.bin/users/users.c	2015/10/09 01:37:09	1.13
+++ src/usr.bin/users/users.c	2018/08/03 16:02:53	1.14
@@ -1,4 +1,4 @@
-/*	$OpenBSD: users.c,v 1.13 2015/10/09 01:37:09 deraadt Exp $	*/
+/*	$OpenBSD: users.c,v 1.14 2018/08/03 16:02:53 deraadt Exp $	*/
 /*	$NetBSD: users.c,v 1.5 1994/12/20 15:58:19 jtc Exp $	*/
 
 /*
@@ -53,6 +53,8 @@
 	struct utmp utmp;
 	int ch;
 
+	if (unveil(_PATH_UTMP, "r") == -1)
+		err(1, "unveil");
 	if (pledge("stdio rpath", NULL) == -1)
 		err(1, "pledge");