man -s 7 capabilities I’d like to see something like OpenBSD’s pledge/unveil. These all work at the process level, though, not individual portions of code in

man -s 7 capabilities I’d like to see something like OpenBSD’s pledge/unveil. These all work at the process level, though, not individual portions of code in a process.