Comment by teamhappy

Here's Theo de Raadt explaining how pledge(2) works: https://www.youtube.com/watch?v=F_7S1eqKsFk