Index: src/asm/main.cpp
--- src/asm/main.cpp.orig
+++ src/asm/main.cpp
@@ -10,6 +10,7 @@
 #include <stdlib.h>
 #include <string.h>
 #include <time.h>
+#include <unistd.h>
 
 #include "diagnostics.hpp"
 #include "extern/getopt.hpp"
@@ -151,6 +152,11 @@ static std::vector<StateFeature> parseStateFeatures(ch
 }
 
 int main(int argc, char *argv[]) {
+	if (pledge("stdio rpath wpath cpath", NULL) == -1) {
+		fputs("pledge", stderr);
+		return 1;
+	}
+
 	// Support SOURCE_DATE_EPOCH for reproducible builds
 	// https://reproducible-builds.org/docs/source-date-epoch/
 	time_t now = time(nullptr);
