Show unveil(2) violators in lastcomm(1) output and daily mail.

input Janne Johansson, schwarze@; OK deraadt@ millert@

2 files changed, 9 insertions, 5 deletions

diff --git a/usr.bin/lastcomm/lastcomm.1 b/usr.bin/lastcomm/lastcomm.1
index cf2cc35b4f7..fa2cdc238a0 100644
--- a/usr.bin/lastcomm/lastcomm.1
+++ b/usr.bin/lastcomm/lastcomm.1
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: lastcomm.1,v 1.19 2018/02/27 07:58:29 mpi Exp $
+.\"	$OpenBSD: lastcomm.1,v 1.20 2019/07/25 13:13:53 bluhm Exp $
 .\"	$NetBSD: lastcomm.1,v 1.5 1995/10/22 01:43:41 ghudson Exp $
 .\"
 .\" Copyright (c) 1980, 1990, 1993
@@ -30,7 +30,7 @@
 .\"
 .\"	@(#)lastcomm.1	8.1 (Berkeley) 6/6/93
 .\"
-.Dd $Mdocdate: February 27 2018 $
+.Dd $Mdocdate: July 25 2019 $
 .Dt LASTCOMM 1
 .Os
 .Sh NAME
@@ -115,10 +115,13 @@ indicates the command was terminated with a signal,
 .Sq P
 indicates the command was terminated due to a
 .Xr pledge 2
-violation, and
+violation,
 .Sq T
 indicates the command did a memory access violation detected by a
-processor trap.
+processor trap, and
+.Sq U
+indicates the command tried a file access that was prevented by
+.Xr unveil 2 .
 .Sh FILES
 .Bl -tag -width /var/account/acct -compact
 .It Pa /var/account/acct
diff --git a/usr.bin/lastcomm/lastcomm.c b/usr.bin/lastcomm/lastcomm.c
index f263fecd79e..2e85494a55f 100644
--- a/usr.bin/lastcomm/lastcomm.c
+++ b/usr.bin/lastcomm/lastcomm.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: lastcomm.c,v 1.27 2018/02/27 07:58:29 mpi Exp $	*/
+/*	$OpenBSD: lastcomm.c,v 1.28 2019/07/25 13:13:53 bluhm Exp $	*/
 /*	$NetBSD: lastcomm.c,v 1.9 1995/10/22 01:43:42 ghudson Exp $	*/
 
 /*
@@ -174,6 +174,7 @@ flagbits(int f)
 	BIT(AXSIG, 'X');
 	BIT(APLEDGE, 'P');
 	BIT(ATRAP, 'T');
+	BIT(AUNVEIL, 'U');
 	*p = '\0';
 	return (flags);
 }