1 files changed, 12 insertions, 5 deletions

diff --git a/plugins/check_smtp.c b/plugins/check_smtp.c
index e806ad29..701af7b0 100644
--- a/plugins/check_smtp.c
+++ b/plugins/check_smtp.c
@@ -37,7 +37,6 @@
 #include "base64.h"
 #include "regex.h"
 
-#include <bits/getopt_ext.h>
 #include <ctype.h>
 #include <string.h>
 #include "check_smtp.d/config.h"
@@ -101,6 +100,14 @@ static int my_close(int /*socket_descriptor*/);
 static int verbose = 0;
 
 int main(int argc, char **argv) {
+#ifdef __OpenBSD__
+        /* - rpath is required to read --extra-opts (given up later)
+         * - inet is required for sockets
+         * - unix is required for Unix domain sockets
+         * - dns is required for name lookups */
+        pledge("stdio rpath inet unix dns", NULL);
+#endif // __OpenBSD__
+
         setlocale(LC_ALL, "");
         bindtextdomain(PACKAGE, LOCALEDIR);
         textdomain(PACKAGE);
@@ -114,6 +121,10 @@ int main(int argc, char **argv) {
                 usage4(_("Could not parse arguments"));
         }
 
+#ifdef __OpenBSD__
+        pledge("stdio inet unix dns", NULL);
+#endif // __OpenBSD__
+
         const check_smtp_config config = tmp_config.config;
 
         if (config.output_format_is_set) {
@@ -808,11 +819,7 @@ check_smtp_config_wrapper process_arguments(int argc, char **argv) {
                         address_family = AF_INET;
                         break;
                 case '6':
-#ifdef USE_IPV6
                         address_family = AF_INET6;
-#else
-                        usage4(_("IPv6 support not available"));
-#endif
                         break;
                 case 'V': /* version */
                         print_revision(progname, NP_VERSION);