diff --git a/mail/opensmtpd-filters/dkimsign/Makefile b/mail/opensmtpd-filters/dkimsign/Makefile
index 208a3260834..fff49edd3c6 100644
--- a/mail/opensmtpd-filters/dkimsign/Makefile
+++ b/mail/opensmtpd-filters/dkimsign/Makefile
@@ -1,6 +1,7 @@
 COMMENT=	dkim signer integration to the OpenSMTPD daemon
 
 V=		0.6
+REVISION=	0
 FILTER_NAME =	dkimsign
 DISTNAME =	filter-dkimsign-${V}
 
diff --git a/mail/opensmtpd-filters/dkimsign/patches/patch-main_c b/mail/opensmtpd-filters/dkimsign/patches/patch-main_c
new file mode 100644
index 00000000000..27acde3ad9d
--- /dev/null
+++ b/mail/opensmtpd-filters/dkimsign/patches/patch-main_c
@@ -0,0 +1,22 @@
+Index: main.c
+--- main.c.orig
++++ main.c
+@@ -22,6 +22,7 @@
+ #include <errno.h>
+ #include <fcntl.h>
+ #include <limits.h>
++#include <paths.h>
+ #include <stdio.h>
+ #include <stdlib.h>
+ #include <string.h>
+@@ -220,7 +221,9 @@ main(int argc, char *argv[])
+ 
+ 	OpenSSL_add_all_digests();
+ 
+-	if (pledge("tmppath stdio", NULL) == -1)
++	if (unveil(_PATH_TMP, "rwc") == -1)
++		osmtpd_err(1, "unveil");
++	if (pledge("stdio rpath wpath cpath", NULL) == -1)
+ 		osmtpd_err(1, "pledge");
+ 
+ 	if ((hash_md = EVP_get_digestbyname(hashalg)) == NULL)