Looks kind of like OpenBSD's pledge(2) and unveil(2). I have used both and I personally think those calls are the best security mitigations in our field :) I

Looks kind of like OpenBSD's pledge(2) and unveil(2). I have used both and I personally think those calls are the best security mitigations in our field :) I would love to see something as simple in Linux.