commit - 6098196c6b90226838737e2a1d83e09fa9834b8f
commit + 25eccc22cd413b9a338870cc3ab376f146b4715f
blob - 7be0a15274d46d85639e6aded03f5b12f624e431
blob + 2bf611f44b9a32b63049b5062cc8327f95fd6b67
--- got/got.c
+++ got/got.c
@@ -867,8 +867,8 @@ cmd_diff(int argc, char *argv[])
 	const char *errstr;
 
 #ifndef PROFILE
-	if (pledge("stdio rpath wpath cpath flock proc exec sendfd", NULL)
-	    == -1)
+	if (pledge("stdio rpath wpath cpath flock proc exec sendfd unveil",
+	    NULL) == -1)
 		err(1, "pledge");
 #endif
 
@@ -904,6 +904,10 @@ cmd_diff(int argc, char *argv[])
 		id_str2 = argv[2];
 	} else
 		usage_diff();
+
+	error = apply_unveil(repo_path, NULL);
+	if (error)
+		goto done;
 
 	error = got_repo_open(&repo, repo_path);
 	free(repo_path);