pledge "stdio rpath wpath cpath", full path handling to satisfy dbopen()

diff --git a/usr.sbin/netgroup_mkdb/netgroup_mkdb.c b/usr.sbin/netgroup_mkdb/netgroup_mkdb.c
index f370aca..adfb4d9 100644 (file)
--- a/usr.sbin/netgroup_mkdb/netgroup_mkdb.c
+++ b/usr.sbin/netgroup_mkdb/netgroup_mkdb.c
@@ -1,4 +1,4 @@
-/*     $OpenBSD: netgroup_mkdb.c,v 1.19 2015/09/10 18:59:34 deraadt Exp $      */
+/*     $OpenBSD: netgroup_mkdb.c,v 1.20 2015/10/13 15:12:53 deraadt Exp $      */
 
 /*
  * Copyright (c) 1994 Christos Zoulas
@@ -96,6 +96,8 @@ main(int argc, char *argv[])
        DB               *db, *ndb, *hdb, *udb;
        int               ch;
 
+       if (pledge("stdio rpath wpath cpath", NULL) == -1)
+               err(1, "pledge");
 
        while ((ch = getopt(argc, argv, "do:")) != -1)
                switch (ch) {