Contributed by Peter N. M. Hansteen on from the Q lifts the shroud dept.

commit, the

top(1)

command on

OpenBSDbecame quite a bit more useful. The commit adds a new

-Q

flag to show each process' use of the

chroot(2)

,

pledge(2)

and

unveil(2)

facilities.

The commit message reads,

List: openbsd-cvs Subject: CVS: cvs.openbsd.org: src From: Klemens Nanni <kn () cvs ! openbsd ! org> Date: 2026-11-05 17:54:16 CVSROOT: /cvs Module name: src Changes by: kn@cvs.openbsd.org 2026/11/05 11:54:16 Modified files: usr.bin/top : display.c machine.c machine.h top.1 top.c Log message: add Q flag/key to show pledge/chroot/unveil usage

Show promises in COMMAND andps(1) state letters pertaining to pledge, chroot and unveil usage in PRIV instead of TIME. To quickly identify programs (un)aware of their privileges and thus in extend the system's security. A non-root user it not enough and alternatives like ps(1) -o state,pledge in tree-mode or wrapped in watch(1) are not nearly as ergonomic as top(1). p and P are already in use, Q has no meaning, but is free. OK deraadt

You will need to install a fresh snapshot in order to explore and enjoy this feature.