Restricted

:= []

Limit which system operations and which parts of the filesystem your program can access. Call it as early as possible in your program so that the rest of the code runs with reduced privileges. Currently, actual enforced restrictions are implemented for these operating systems: OpenBSD

Calls the restricted zig library.

SystemOperation : [
    StdinStdoutStderrAndBasicFunctionality,
    ReadFromFilesystem,
    WriteToFilesystem,
    CreateAndRemoveOnFilesystem,
    SpecialCreateAndRemoveOnFilesystem,
    Networking,
    NetworkingMulticast,
    FileAttributeModifiaction,
    ChangeFileOwnership,
    FileLocking,
    Unix,
    DNS,
    GetPassword,
    SendFileDescriptors,
    ReceivingFileDescriptors,
    TapeDrives,
    TTY,
    ProcessRelation,
    Execute,
    ProtectionExecute,
    SetTime,
    Processes,
    VirtualMemoryInfo,
    ChangeRightsOfAProcess,
    PacketFiltering,
    InspectionRoutingTable,
    ChangeRoutingTable,
    Audio,
    Video,
    BerkeleyPacketFiltering,
    Error,
]

Allowed system calls.

PathAccess : {
    path : Str,
    permissions : List(PathPermission),
}

Allowed filesystem view.