$OpenBSD: patch-bin_dig_nslookup_c,v 1.9 2019/03/01 17:17:08 sthen Exp $
Index: bin/dig/nslookup.c
--- bin/dig/nslookup.c.orig
+++ bin/dig/nslookup.c
@@ -1024,8 +1024,19 @@ main(int argc, char **argv) {
 	result = isc_app_start();
 	check_result(result, "isc_app_start");
 
+	if (pledge("stdio rpath inet unix dns", NULL) == -1) {
+		perror("pledge");
+		exit(1);
+	}
+
 	setup_libs();
 	progname = argv[0];
+
+	/* inet for network connections, dns for resolv.conf, rpath for charset conversion */
+	if (pledge("stdio rpath inet dns", NULL) == -1) {
+		perror("pledge");
+		exit(1);
+	}
 
 	setup_system(false, false);
 	parse_args(argc, argv);
