$OpenBSD: patch-sshlockout_c,v 1.1.1.1 2017/07/27 00:08:17 jca Exp $

Index: sshlockout.c
--- sshlockout.c.orig
+++ sshlockout.c
@@ -199,6 +199,11 @@ main(int ac, char **av)
 	freopen("/dev/null", "w", stdout);
 	freopen("/dev/null", "w", stderr);
 
+	if (pledge("stdio proc exec", NULL) == -1) {
+		syslog(LOG_ERR, "sshlockout: pledge: %m");
+		return(1);
+	}
+
 	while (fgets(buf, sizeof(buf), stdin) != NULL) {
 		if (strstr(buf, "sshd") == NULL)
 			continue;
