From cc2f8927c147f81657c450847cc86d0b99a90f89 Mon Sep 17 00:00:00 2001
From: gilles <gilles@openbsd.org>
Date: Wed, 14 Oct 2015 19:56:58 +0000
Subject: [PATCH] pledge() privileged process

ok deraadt@
---
 usr.sbin/smtpd/smtpd.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/usr.sbin/smtpd/smtpd.c b/usr.sbin/smtpd/smtpd.c
index 4bf1af4bb86..099cd595c9c 100644
--- a/usr.sbin/smtpd/smtpd.c
+++ b/usr.sbin/smtpd/smtpd.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: smtpd.c,v 1.246 2015/10/14 09:14:11 sunil Exp $	*/
+/*	$OpenBSD: smtpd.c,v 1.247 2015/10/14 19:56:58 gilles Exp $	*/
 
 /*
  * Copyright (c) 2008 Gilles Chehade <gilles@poolp.org>
@@ -690,6 +690,9 @@ main(int argc, char *argv[])
 
 	purge_task();
 
+	if (pledge("stdio rpath wpath cpath tmppath getpw sendfd proc exec", NULL) == -1)
+		err(1, "pledge");
+	
 	if (event_dispatch() < 0)
 		fatal("smtpd: event_dispatch");
 
-- 
2.20.1