Is there much benefit from pledging a shell? I thought a fork/exec (seems like a core requirement for a shell) didn't inherit the pledge from the parent? >

Is there much benefit from pledging a shell? I thought a fork/exec (seems like a core requirement for a shell) didn't inherit the pledge from the parent? > promise: exec > Allows a process to call execve(2). Coupled with the proc promise, > this allows a process to fork and execute another program. The new > program starts running without pledge active and hopefully makes > a new pledge() > -- openbsd pledge(2) manpage