dhcpcd now uses pledge(), there are some articles with findings from the process that may be of interest to readers: https://roy.marples.name/blog/capsicum_vs_pledge.html https://roy.marples.name/blog/capsicum_vs_pledge_part2.html port change: move the homedir for the @newuser to /var/empty now that dhcpcd no longer requires files inside the chroot directory.