===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/openssl/spkac.c,v
retrieving revision 1.5
retrieving revision 1.6
diff -c -r1.5 -r1.6
*** src/usr.bin/openssl/spkac.c	2015/09/11 14:30:23	1.5
--- src/usr.bin/openssl/spkac.c	2015/10/10 22:28:51	1.6
***************
*** 1,4 ****
! /* $OpenBSD: spkac.c,v 1.5 2015/09/11 14:30:23 bcook Exp $ */
  /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
   * project 1999. Based on an original idea by Massimiliano Pala
   * (madwolf@openca.org).
--- 1,4 ----
! /* $OpenBSD: spkac.c,v 1.6 2015/10/10 22:28:51 doug Exp $ */
  /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
   * project 1999. Based on an original idea by Massimiliano Pala
   * (madwolf@openca.org).
***************
*** 180,185 ****
--- 180,190 ----
  	CONF *conf = NULL;
  	NETSCAPE_SPKI *spki = NULL;
  	EVP_PKEY *pkey = NULL;
+ 
+ 	if (single_execution) {
+ 		if (pledge("stdio rpath wpath cpath", NULL) == -1)
+ 			perror("pledge");
+ 	}
  
  	memset(&spkac_config, 0, sizeof(spkac_config));
  	spkac_config.spkac = "SPKAC";