===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/mandoc/mandocdb.c,v
retrieving revision 1.154
retrieving revision 1.155
diff -c -r1.154 -r1.155
*** src/usr.bin/mandoc/mandocdb.c	2015/10/12 21:16:32	1.154
--- src/usr.bin/mandoc/mandocdb.c	2015/10/12 22:30:27	1.155
***************
*** 1,4 ****
! /*	$OpenBSD: mandocdb.c,v 1.154 2015/10/12 21:16:32 schwarze Exp $ */
  /*
   * Copyright (c) 2011, 2012 Kristaps Dzonsons <kristaps@bsd.lv>
   * Copyright (c) 2011-2015 Ingo Schwarze <schwarze@openbsd.org>
--- 1,4 ----
! /*	$OpenBSD: mandocdb.c,v 1.155 2015/10/12 22:30:27 schwarze Exp $ */
  /*
   * Copyright (c) 2011, 2012 Kristaps Dzonsons <kristaps@bsd.lv>
   * Copyright (c) 2011-2015 Ingo Schwarze <schwarze@openbsd.org>
***************
*** 338,343 ****
--- 338,348 ----
  	size_t		  j, sz;
  	int		  ch, i;
  
+ 	if (pledge("stdio rpath wpath cpath fattr proc exec", NULL) == -1) {
+ 		perror("pledge");
+ 		return (int)MANDOCLEVEL_SYSERR;
+ 	}
+ 
  	memset(&conf, 0, sizeof(conf));
  	memset(stmts, 0, STMT__MAX * sizeof(sqlite3_stmt *));
  
***************
*** 419,424 ****
--- 424,434 ----
  	argc -= optind;
  	argv += optind;
  
+ 	if (nodb && pledge("stdio rpath", NULL) == -1) {
+ 		perror("pledge");
+ 		return (int)MANDOCLEVEL_SYSERR;
+ 	}
+ 
  	if (OP_CONFFILE == op && argc > 0) {
  		warnx("-C: Too many arguments");
  		goto usage;
***************
*** 445,450 ****
--- 455,466 ----
  			 * The existing database is usable.  Process
  			 * all files specified on the command-line.
  			 */
+ 			if (!nodb && pledge("stdio rpath wpath cpath fattr",
+ 			    NULL) == -1) {
+ 				perror("pledge");
+ 				exitcode = (int)MANDOCLEVEL_SYSERR;
+ 				goto out;
+ 			}
  			use_all = 1;
  			for (i = 0; i < argc; i++)
  				filescan(argv[i]);