http://man.openbsd.org/OpenBSD-current/man2/pledge.2 and the slides to the presentation http://www.openbsd.org/papers/hackfest2015-pledge/index.html

thanks ... that works. Also this register article is decent: http://www.theregister.co.uk/2015/11/10/untamed_pledge_hopes...

Thank you for the links. Reading the presentation, and ignoring the 'monkey' and 'loudmouth' comments, made me think this could be seen as an implementation of the 'intent security' capability that Android has through its Manifests. Although I assume (I did not go through all the slides) that implementing this is 'slightly' more complex due to the number of things you can pledge to use/non-use.

pledge allows a process to declares privileges it needs to function. If the process accesses something beyond those pledges then the Kernel kills the process. The idea is that this will help reduce the surface area that certain types of attacks like remote code execution can have.