My issue with pledge is that it doesn&#x27;t get applied to the new process on exec. This makes it essentially useless for a program that needs to start any other programs to do it&#x27;s job.<p>Seccomp is quite cool because it lets you filter syscalls and then there&#x27;s no way for you to disable the filtering (assuming no bugs in the implementation).