package restricted

  1. Overview
  2. Docs
Limit which system operations and which parts of the filesystem your program can access

Install 

dune-project
 Dependency

codeberg.org Readme Changelog Edit opam file Versions (3)

Authors

  1. R
    Remove Wingman <ocaml@rw8.addy.io>

Maintainers

  1. R
    Remove Wingman <ocaml@rw8.addy.io>

Sources

ocaml-restricted-2.0.0.tar.gz
md5=6547cefcfc520d4fe31e1f254e53459b
sha512=3b48e8a135dd1b72549245e986ee7b03330a7eb97ca42e6acbb23dc8ef2319287e41953ee84954aa431530a8e8508a45596838e7dfa676c1859b5a131932dbdc

doc/CHANGELOG.html

Changelog

https://keepachangelog.com/

[Unreleased]

  • tested on:

    • x86_64 openbsd (16/16 Tests passed)
    • x86_64-alpine-linux (Landlock ABI version: 7) (4/12 Tests passed: file_read_unv, file_write_unv, file_create_unv_linux, file_cwrr_unv_linux)

Added

  • API: exec promises and accesses optional
  • OpenBSD: exec promises

Removed

  • SystemOperation.TmpPath (deprecated see: pledge (2))

[1.2.0] - 2026-01-17

  • add Linux (only filesystem view) via landlock(7)

    • except unlink/removing, whole other thing with LANDLOCK_ACCESS_FS_READ_FILE in landlock
  • add Semantic Versioning
  • change description to make it more clear

  • tested with flambda switch on:

    • x86_64-openbsd
    • x86_64-arch-linux, x86_64-alpine-linux (Landlock ABI version: 7)

[1.1] - 2026-01-04

  • Small opam fix so it can be released

[1.0] - 2026-01-04

Added

  • OpenBSD full restriction calls implementation
  • initial project setup and core functionality.