===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/write/write.c,v
retrieving revision 1.29
retrieving revision 1.30
diff -u -r1.29 -r1.30
--- src/usr.bin/write/write.c	2015/10/05 07:09:46	1.29
+++ src/usr.bin/write/write.c	2015/10/06 03:25:02	1.30
@@ -1,4 +1,4 @@
-/*	$OpenBSD: write.c,v 1.29 2015/10/05 07:09:46 deraadt Exp $	*/
+/*	$OpenBSD: write.c,v 1.30 2015/10/06 03:25:02 deraadt Exp $	*/
 /*	$NetBSD: write.c,v 1.5 1995/08/31 21:48:32 jtc Exp $	*/
 
 /*
@@ -245,6 +245,13 @@
 	gid = getgid();
 	if (setresgid(gid, gid, gid) == -1)
 		err(1, "setresgid");
+
+	/*
+	 * Unfortunately this is rather late - well after utmp
+	 * parsing, then pinned by the tty open and setresgid
+	 */
+	if (tame("stdio", NULL) == -1)
+		err(1, "tame");
 
 	(void)signal(SIGINT, done);
 	(void)signal(SIGHUP, done);