1 files changed, 6 insertions, 1 deletions

diff --git a/src/usr.bin/openssl/req.c b/src/usr.bin/openssl/req.c
index c7256ae59a..032944b233 100644
--- a/src/usr.bin/openssl/req.c
+++ b/src/usr.bin/openssl/req.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: req.c,v 1.9 2015/09/14 01:45:03 doug Exp $ */
+/* $OpenBSD: req.c,v 1.10 2015/10/10 22:28:51 doug Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -176,6 +176,11 @@ req_main(int argc, char **argv)
         const EVP_MD *md_alg = NULL, *digest = NULL;
         unsigned long chtype = MBSTRING_ASC;
 
+        if (single_execution) {
+                if (pledge("stdio rpath wpath cpath", NULL) == -1)
+                        perror("pledge");
+        }
+
         req_conf = NULL;
         cipher = EVP_aes_256_cbc();
         digest = EVP_sha256();