===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/openssl/crl2p7.c,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- src/usr.bin/openssl/crl2p7.c	2015/08/22 16:36:05	1.4
+++ src/usr.bin/openssl/crl2p7.c	2015/10/10 22:28:51	1.5
@@ -1,4 +1,4 @@
-/* $OpenBSD: crl2p7.c,v 1.4 2015/08/22 16:36:05 jsing Exp $ */
+/* $OpenBSD: crl2p7.c,v 1.5 2015/10/10 22:28:51 doug Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -168,6 +168,11 @@
 	STACK_OF(X509_CRL) *crl_stack = NULL;
 	STACK_OF(X509) *cert_stack = NULL;
 	int ret = 1;
+
+	if (single_execution) {
+		if (pledge("stdio rpath wpath cpath", NULL) == -1)
+			perror("pledge");
+	}
 
 	memset(&crl2p7_config, 0, sizeof(crl2p7_config));