===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/getent/getent.c,v
retrieving revision 1.9
retrieving revision 1.10
diff -c -r1.9 -r1.10
*** src/usr.bin/getent/getent.c	2015/01/16 06:40:08	1.9
--- src/usr.bin/getent/getent.c	2015/10/10 05:26:57	1.10
***************
*** 1,4 ****
! /*	$OpenBSD: getent.c,v 1.9 2015/01/16 06:40:08 deraadt Exp $	*/
  /*	$NetBSD: getent.c,v 1.7 2005/08/24 14:31:02 ginsbach Exp $	*/
  
  /*-
--- 1,4 ----
! /*	$OpenBSD: getent.c,v 1.10 2015/10/10 05:26:57 doug Exp $	*/
  /*	$NetBSD: getent.c,v 1.7 2005/08/24 14:31:02 ginsbach Exp $	*/
  
  /*-
***************
*** 34,39 ****
--- 34,40 ----
  #include <sys/socket.h>
  
  #include <ctype.h>
+ #include <err.h>
  #include <errno.h>
  #include <grp.h>
  #include <limits.h>
***************
*** 75,91 ****
  static struct getentdb {
  	const char	*name;
  	int		(*fn)(int, char *[]);
  } databases[] = {
! 	{	"ethers",	ethers,		},
! 	{	"group",	group,		},
! 	{	"hosts",	hosts,		},
! 	{	"passwd",	passwd,		},
! 	{	"protocols",	protocols,	},
! 	{	"rpc",		rpc,		},
! 	{	"services",	services,	},
! 	{	"shells",	shells,		},
  
! 	{	NULL,		NULL,		},
  };
  
  int
--- 76,93 ----
  static struct getentdb {
  	const char	*name;
  	int		(*fn)(int, char *[]);
+ 	const char	*pledge;
  } databases[] = {
! 	{	"ethers",	ethers,		"stdio rpath"	},
! 	{	"group",	group,		"stdio rpath"	},
! 	{	"hosts",	hosts,		"stdio dns"	},
! 	{	"passwd",	passwd,		"stdio rpath"	},
! 	{	"protocols",	protocols,	"stdio rpath"	},
! 	{	"rpc",		rpc,		"stdio rpath"	},
! 	{	"services",	services,	"stdio rpath"	},
! 	{	"shells",	shells,		"stdio rpath"	},
  
! 	{	NULL,		NULL,				},
  };
  
  int
***************
*** 93,102 ****
--- 95,110 ----
  {
  	struct getentdb	*curdb;
  
+ 	if (pledge("stdio dns rpath", NULL) == -1)
+ 		err(1, "pledge");
+ 
  	if (argc < 2)
  		usage();
  	for (curdb = databases; curdb->name != NULL; curdb++) {
  		if (strcmp(curdb->name, argv[1]) == 0) {
+ 			if (pledge(curdb->pledge, NULL) == -1)
+ 				err(1, "pledge");
+ 
  			exit(curdb->fn(argc, argv));
  			break;
  		}