In pledge(), put "dns" right after "inet".

2 files changed, 4 insertions, 4 deletions

diff --git a/src/usr.bin/openssl/openssl.c b/src/usr.bin/openssl/openssl.c
index f99c625260..e8c75daf0a 100644
--- a/src/usr.bin/openssl/openssl.c
+++ b/src/usr.bin/openssl/openssl.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: openssl.c,v 1.20 2015/11/21 16:03:06 jca Exp $ */
+/* $OpenBSD: openssl.c,v 1.21 2015/11/21 16:04:20 jca Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -438,7 +438,7 @@ main(int argc, char **argv)
         arg.data = NULL;
         arg.count = 0;
 
-        if (pledge("stdio inet rpath wpath cpath proc flock tty dns", NULL) == -1) {
+        if (pledge("stdio inet dns rpath wpath cpath proc flock tty", NULL) == -1) {
                 fprintf(stderr, "openssl: pledge: %s\n", strerror(errno));
                 exit(1);
         }
diff --git a/src/usr.bin/openssl/s_client.c b/src/usr.bin/openssl/s_client.c
index c73a5fd38f..21454c5bf3 100644
--- a/src/usr.bin/openssl/s_client.c
+++ b/src/usr.bin/openssl/s_client.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: s_client.c,v 1.24 2015/11/21 16:03:06 jca Exp $ */
+/* $OpenBSD: s_client.c,v 1.25 2015/11/21 16:04:20 jca Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -365,7 +365,7 @@ s_client_main(int argc, char **argv)
         long socket_mtu = 0;
 
         if (single_execution) {
-                if (pledge("stdio inet rpath wpath cpath tty dns", NULL) == -1) {
+                if (pledge("stdio inet dns rpath wpath cpath tty", NULL) == -1) {
                         perror("pledge");
                         exit(1);
                 }