There's a closed pull request on the mblaze repository pledge(2) all programs https://github.com/leahneukirchen/mblaze/pull/179 Description: I have checked all pledge calls and added some to ensure all main() functions are pledged as tight as possible. The only program remaining with a broad pledge is mshow (full filesystem access plus fork/exec). I think the most important improvement there would be to use unveil(2), but I consider adding support for unveil a separate endeavour. I've been running this code without problems since December (with the exception of mdate which I just pledged), although I have only just rebased my work on all changes that happended in 2020 on master. /cc @holsta