package restricted

  1. Overview
  2. No Docs
Limit which system operations and which parts of the filesystem your program can access

Install 

dune-project
 Dependency

codeberg.org Edit opam file Versions (2)

Authors

  1. R
    Remove Wingman <ocaml@rw8.addy.io>

Maintainers

  1. R
    Remove Wingman <ocaml@rw8.addy.io>

Sources

ocaml-restricted-1.2.0.tar.gz
md5=7395845f7dbb8d87920f739b9d65b00c
sha512=967a9aef34b572363aae925f28ade2cbf900b1504b4eaa51e49b028414419e2dec6e498f34bfbaa15de93503bae9b75fa9f411202de61cb5464eb1040a9b3d51

Description

Call it as early as possible in your program so that the rest of the code runs with reduced privileges. Currently, actual enforced restrictions are implemented for these operating systems:

  • OpenBSD
  • Linux (only filesystem view)

Even on other operating systems, you can still use restricted to document which privileges your program needs. Users can then test if your program respects these promises with tools such as pledge on Linux. Enjoy :)

Tags

openbsd restricted

Published: 23 Jan 2026

Dependencies (3)

  1. ppx_inline_test
  2. ocaml >= "5.1.0"
  3. dune >= "3.17"

Dev Dependencies (1)

  1. odoc with-doc

Used by

None

Conflicts

None