diff --git a/endlessh.c b/endlessh.c
index 51a1df3..5384ac2 100644
--- a/endlessh.c
+++ b/endlessh.c
@@ -1,4 +1,9 @@
-#define _XOPEN_SOURCE 600
+#if defined(__OpenBSD__)
+#  define _BSD_SOURCE  /* for pledge(2) */
+#else
+#  define _XOPEN_SOURCE 600
+#endif
+
 #include <time.h>
 #include <errno.h>
 #include <stdio.h>
@@ -596,6 +601,11 @@ sendline(struct client *client, int max_line_length, unsigned long *rng)
 int
 main(int argc, char **argv)
 {
+#if (defined(__OpenBSD__))
+    if (pledge("inet stdio rpath", NULL) == -1)
+        die();
+#endif
+
     struct config config = CONFIG_DEFAULT;
     const char *config_file = DEFAULT_CONFIG_FILE;
     config_load(&config, config_file, 1);