1 files changed, 6 insertions, 1 deletions

diff --git a/src/usr.bin/openssl/spkac.c b/src/usr.bin/openssl/spkac.c
index b635b5e3b2..1c8b7073d8 100644
--- a/src/usr.bin/openssl/spkac.c
+++ b/src/usr.bin/openssl/spkac.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: spkac.c,v 1.5 2015/09/11 14:30:23 bcook Exp $ */
+/* $OpenBSD: spkac.c,v 1.6 2015/10/10 22:28:51 doug Exp $ */
 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  * project 1999. Based on an original idea by Massimiliano Pala
  * (madwolf@openca.org).
@@ -181,6 +181,11 @@ spkac_main(int argc, char **argv)
         NETSCAPE_SPKI *spki = NULL;
         EVP_PKEY *pkey = NULL;
 
+        if (single_execution) {
+                if (pledge("stdio rpath wpath cpath", NULL) == -1)
+                        perror("pledge");
+        }
+
         memset(&spkac_config, 0, sizeof(spkac_config));
         spkac_config.spkac = "SPKAC";
         spkac_config.spksect = "default";