> SELinux assumes that the operating system is the trusted downstream of less trustworthy software. Yes, it's perhaps not reasonable to compare pledge/unveil a

> SELinux assumes that the operating system is the trusted downstream of less trustworthy software. Yes, it's perhaps not reasonable to compare pledge/unveil and something like SELinux. It really is different attack vectors the tools are defending against or mitigating.