> is it like application permissions? FWICT, only sort of. It's like giving up permissions that you might already have (presumably to reduce potential securit

> is it like application permissions? FWICT, only sort of. It's like giving up permissions that you might already have (presumably to reduce potential security problems). And it's a bit more specific to the kernel. Pledge: "I will at most use these kernel facilities" (don't let me do otherwise) Unveil: "I will at most access these fs paths" (hide all other paths)