[eugeneionesco]

Of course it does, seccomp, developed way before pledge :))

[sydney6]

And where is seccomp used (by default)?

[ac29]

Chrome and Firefox both use seccomp by default on Linux.

[sydney6]

OpenBSD has around 500 programs with pledge support in base.

edit: and this number does not even include the ports available with pledge support, among others chromium.. and the fact that they were capable of adding pledge support this quickly says a lot, imho, about the implementation differences between libseccomp and pledge.

[anthk]

Also, pledge is everywhere. Seppconf, not. And SeLinux just in few distros.

Pledge is instrinsic. You have it right from the beggining with C and Perl. And it's straightforward to use.

[anthk]

Not the same approach.