I don't think Linux will get pledge() for a long time, and this definitely won't do it in the general case either. More specific critique of seccomp here: http

I don't think Linux will get pledge() for a long time, and this definitely won't do it in the general case either. More specific critique of seccomp here: https://blog.habets.se/2022/03/seccomp-unsafe-at-any-speed.html https://blog.habets.se/2022/03/seccomp-unsafe-at-any-speed.h...