===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/whois/whois.c,v
retrieving revision 1.48
retrieving revision 1.49
diff -u -r1.48 -r1.49
--- src/usr.bin/whois/whois.c	2015/08/17 10:48:10	1.48
+++ src/usr.bin/whois/whois.c	2015/10/03 01:33:20	1.49
@@ -1,4 +1,4 @@
-/*      $OpenBSD: whois.c,v 1.48 2015/08/17 10:48:10 sthen Exp $   */
+/*      $OpenBSD: whois.c,v 1.49 2015/10/03 01:33:20 deraadt Exp $   */
 
 /*
  * Copyright (c) 1980, 1993
@@ -137,6 +137,9 @@
 
 	if (!argc || (country != NULL && host != NULL))
 		usage();
+
+	if (tame("stdio dns inet", NULL) == -1)
+		err(1, "tame");
 
 	if (host == NULL && country == NULL && !(flags & WHOIS_QUICK))
 		flags |= WHOIS_RECURSE;