BSD's pledge() system call forces the current process into a restricted-service operating mode. A Linux port is now available..