$ ./pledge.com 'stdio rpath' ls # read only list files