===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/sdiff/sdiff.c,v
retrieving revision 1.32
retrieving revision 1.33
diff -u -r1.32 -r1.33
--- src/usr.bin/sdiff/sdiff.c	2015/02/05 12:59:58	1.32
+++ src/usr.bin/sdiff/sdiff.c	2015/10/10 19:03:08	1.33
@@ -1,4 +1,4 @@
-/*	$OpenBSD: sdiff.c,v 1.32 2015/02/05 12:59:58 millert Exp $ */
+/*	$OpenBSD: sdiff.c,v 1.33 2015/10/10 19:03:08 deraadt Exp $ */
 
 /*
  * Written by Raymond Lai <ray@cyth.net>.
@@ -163,6 +163,9 @@
 	const char *outfile = NULL;
 	char **diffargv, *diffprog = "diff", *filename1, *filename2,
 	    *tmp1, *tmp2, *s1, *s2;
+
+	if (pledge("stdio rpath wpath cpath proc exec", NULL) == -1)
+		err(1, "pledge");
 
 	/*
 	 * Process diff flags.