Packages

alcove

0.40.2
1.0.1 1.0.0 0.40.6 0.40.5 0.40.4 0.40.3 0.40.2 0.40.1 retired 0.40.0 0.39.1 0.38.0 0.37.0 0.36.0 0.35.0 0.34.0 0.33.1 0.33.0 0.31.0 0.30.0 0.29.0 0.28.0 0.27.1 0.27.0 0.26.2 0.26.1 0.26.0 0.25.0 0.23.0 0.22.3 0.22.2

Control plane for Unix processes, containers and sandboxes

HexDocs

Current section

Files

Jump to
Readme
30 Versions
0 Dependencies
Dependants
Files
Activity
alcove edoc pledge-4.edoc
Raw

edoc/pledge-4.edoc 

@doc pledge(2): restrict system operations



An empty list ([]) specifies promises should not be changed. Warning:

an empty string ("") is equivalent to an empty list.



To specify no capabilities, use an empty binary: `<<>>>' or `<<"">>'



== Support ==



• OpenBSD



== Examples ==



Fork a control process:



• restricted to stdio, proc and exec capabilities



• unrestricted after calling exec



```

1> {ok, Drv} = alcove_drv:start().

{ok,<0.177.0>}

2> {ok, Pid} = alcove:fork(Drv, []).

{ok,10059}

3> alcove:pledge(Drv, [Pid], <<"stdio proc exec">>, []).

ok

'''