Hacker News Reader

I think pledge(2) and unveil(2) would help to prevent "what can be done if a bug is exploited", yes?

Ever so slightly, but still a long ways off from proper mac or rbac support.