1 files changed, 6 insertions, 1 deletions

diff --git a/src/usr.bin/openssl/ca.c b/src/usr.bin/openssl/ca.c
index e32abcdf21..0b246aeb15 100644
--- a/src/usr.bin/openssl/ca.c
+++ b/src/usr.bin/openssl/ca.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ca.c,v 1.16 2015/09/21 13:31:26 bcook Exp $ */
+/* $OpenBSD: ca.c,v 1.17 2015/10/10 22:28:51 doug Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -286,6 +286,11 @@ ca_main(int argc, char **argv)
         const char *errstr = NULL;
         DB_ATTR db_attr;
 
+        if (single_execution) {
+                if (pledge("stdio rpath wpath cpath", NULL) == -1)
+                        perror("pledge");
+        }
+
         conf = NULL;
         key = NULL;
         section = NULL;