commit - 1a7d56bfbf9be3c492597ac7b991fb996df2b801
commit + 336a56e2bea6ab40637eba31de832d2a34fb573d
blob - f8033249963a4bc9befdca3686b0ef9b6c95d5e3
blob + 729bc2a8663c8f1e0c1b335a9aed797ed5e6fe57
--- fm.c
+++ fm.c
@@ -1382,6 +1382,9 @@ main(int argc, char *argv[])
 		}
 	}
 
+	if (pledge("stdio rpath wpath cpath tty proc exec", NULL) == -1)
+		err(1, "pledge");
+
 	get_user_programs();
 	init_term();
 	fm.nfiles = 0;