On: Pledge() and unveil() in SerenityOS (2020)

[elbigbad]

No a forked process only inherits the broadest permissions of the parent and can only downscope.

[notaplumber1 → elbigbad]

It's not the broadest permissions from the parent, but the promises at the time of the fork, for example you can setup the parent in such a way that you fork off early a unprivileged (or privileged) child that has a different set of promises from the parent.

[waynesonfire → notaplumber1]

kinda lose the setup / steady state benefit for child processes.

[notaplumber1 → waynesonfire]

Not at all.