chickadee » pledge

Outdated egg!

This is an egg for CHICKEN 4, the unsupported old release. You're almost certainly looking for the CHICKEN 5 version of this egg, if it exists.

If it does not exist, there may be equivalent functionality provided by another egg; have a look at the egg index. Otherwise, please consider porting this egg to the current version of CHICKEN.

pledge

Description

This extension provides bindings to OpenBSD's pledge(2) system call.

The source for this egg is available here.

Usage

A single procedure is provided, which has the same interface as the system call.

(use pledge)
(pledge "rpath")

API

pledge promisesprocedure

Restricts the current process to the capabilities specified by promises, which should be a string.

On success, 0 is returned. On error, -1 is returned and errno should be consulted.

Refer to pledge(2) for more information.

Limitations

Path whitelisting is not available (since, at the time of writing, pledge(2)'s whitelisting feature is itself unavailable).

Author

Evan Hanson

License

3-Clause BSD

Contents »