Tunney: Porting OpenBSD pledge() to Linux

Justine Tunney has created an
implementation of the OpenBSD pledge() system call for Linux.

OpenBSD limits security to a small pond, but makes it easy. Linux
is a big tent, but makes it impossibly hard. SECCOMP BPF might as
well be the Traditional Chinese of programming languages, since
only a small number of people who've devoted the oodles of time it
takes to understand code like what you see above have actually been
able to benefit from it.