===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/sdiff/sdiff.c,v
retrieving revision 1.33
retrieving revision 1.34
diff -c -r1.33 -r1.34
*** src/usr.bin/sdiff/sdiff.c	2015/10/10 19:03:08	1.33
--- src/usr.bin/sdiff/sdiff.c	2015/10/15 23:06:46	1.34
***************
*** 1,4 ****
! /*	$OpenBSD: sdiff.c,v 1.33 2015/10/10 19:03:08 deraadt Exp $ */
  
  /*
   * Written by Raymond Lai <ray@cyth.net>.
--- 1,4 ----
! /*	$OpenBSD: sdiff.c,v 1.34 2015/10/15 23:06:46 deraadt Exp $ */
  
  /*
   * Written by Raymond Lai <ray@cyth.net>.
***************
*** 313,318 ****
--- 313,321 ----
  	case -1:
  		err(2, "could not fork");
  	}
+ 
+ 	if (pledge("stdio rpath wpath cpath", NULL) == -1)
+ 		err(1, "pledge");
  
  	/* parent */
  	/* We don't write to the pipe. */