It's funny you mention OpenBSD and pledge/unveil, because they don't really come close enough to being able to lock down the system, while linux has things like

It's funny you mention OpenBSD and pledge/unveil, because they don't really come close enough to being able to lock down the system, while linux has things like SELinux/RSBAC available.