From e5df35884c56ca1517e22ce036993f8100a032e1 Mon Sep 17 00:00:00 2001
From: Stuart Henderson <sthen@users.noreply.github.com>
Date: Mon, 30 Dec 2019 16:54:44 +0000
Subject: [PATCH] use pledge() if available

---
 bgpq4.c | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/bgpq4.c b/bgpq4.c
index 42cf00e..a47e738 100644
--- a/bgpq4.c
+++ b/bgpq4.c
@@ -142,6 +142,13 @@ main(int argc, char* argv[])
 	int widthSet=0, aggregate=0, refine=0, refineLow=0;
 	unsigned long maxlen=0;
 
+#ifdef HAVE_PLEDGE
+	if (pledge("stdio inet dns", NULL) == -1) {
+		sx_report(SX_ERROR, "pledge() failed");
+		exit(1);
+	}
+#endif
+	
 	bgpq_expander_init(&expander,af);
 	if (getenv("IRRD_SOURCES"))
 		expander.sources=getenv("IRRD_SOURCES");