OpenBSD's top(1) command gains a new -Q flag that displays each process's use of chroot(2), pledge(2), and unveil(2) security facilities. The change replaces one of the state letters with indicators showing whether processes are using these privilege-reduction mechanisms, making it easier for administrators to identify potentially overprivileged programs at a glance.
Background
OpenBSD is known for its strong security focus, featuring progressive privilege-reduction mechanisms like pledge (2015) and unveil (2017) alongside traditional chroot. The -Q flag makes it significantly easier for sysadmins to audit process security posture directly from the familiar top interface.
- Source
- Lobsters
- Published
- Nov 8, 2026 at 02:41 AM
- Score
- 6.0 / 10