In OpenBSD 5.3, support for [[full disk encryption]] was introduced.<ref>{{cite web|title=OpenBSD 5.3|url=http://www.openbsd.org/53.html|website=OpenBSD|accessdate=May 26, 2016}}</ref>
OpenBSD 5.8 introduced the first<code>pledge</code> work[[system oncall]] afor newrestricting process-containmentfacility,capabilities originallyto nameda tame,minimal latersubset renamedrequired tofor pledgecorrect operation.<ref>{{cite web|title=pledge() - a new mitigation mechanism|url=https://www.openbsd.org/papers/hackfest2015-pledge|website=OpenBSD|accessdate=May 19, 2018}}</ref> SinceIf the originalprocess is compromised and attempts to perform an unintended behavior, it will be terminated by the kernel. Since its introduction, applications and ports have been changed to support this<code>pledge</code>, newincluding the [[Chromium (web browser)|Chromium]] [[web techniquebrowser]].
