From 86070771eef1c6518b5a0ed036b5405958ac34b9 Mon Sep 17 00:00:00 2001
From: anton <anton@openbsd.org>
Date: Sat, 10 Feb 2018 17:51:37 +0000
Subject: [PATCH] Pledge monitoring process; ok tedu@

---
 usr.sbin/rebound/rebound.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/usr.sbin/rebound/rebound.c b/usr.sbin/rebound/rebound.c
index d27e0651832..dc7756e8fc9 100644
--- a/usr.sbin/rebound/rebound.c
+++ b/usr.sbin/rebound/rebound.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: rebound.c,v 1.93 2018/02/07 01:02:46 tedu Exp $ */
+/* $OpenBSD: rebound.c,v 1.94 2018/02/10 17:51:37 anton Exp $ */
 /*
  * Copyright (c) 2015 Ted Unangst <tedu@openbsd.org>
  *
@@ -886,6 +886,9 @@ monitorloop(int ud, int ld, int ud6, int ld6, const char *confname)
 	int conffd = -1;
 	struct timespec ts, *timeout = NULL;
 
+	if (pledge("stdio rpath proc exec", NULL) == -1)
+		err(1, "pledge");
+
 	kq = kqueue();
 
 	/* catch these signals with kevent */
-- 
2.20.1