Every hurdle helps. Like OpenBSD `pledge`. It doesn't stop everything and processes like bash can fork/exec to unwrap the pledge wrapper. But it helps get in th

Every hurdle helps. Like OpenBSD `pledge`. It doesn't stop everything and processes like bash can fork/exec to unwrap the pledge wrapper. But it helps get in the way of return oriented programming. Theo de Raadt had a good description of why every hurdle helps, but I can't find it. :(